a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: MEND:CVE-2025-65106...

accessiqlue (2025.12.21154255), agentmanager (>=0.1.0, <=0.1.1) +300 more potentially affected by CVE-2025-65106 via langchain-core (>=1.0.0, <=1.0.5)

langchain-core PYPI version =1.0.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer 2025.12.21193050 - ai-claim-essence 2025.12.20202921 - ai-design-insights 2025.12.21145447 - ai-mysql-translator 2025.12.21101721 - ai-reliability-analyzer 2025.12.21171415 - ai-risk-extractor 2025.12.21102659 -...

CVE-2025-65106

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

EUVD-2025-198318

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

CVE-2025-65106 LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

CVE-2025-65106: Improper Neutralization of Special Elements Used in a Template Engine

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

LangChain security vulnerabilities

LangChain is a LangChain open source framework for developing applications powered by the Large Language Model LLM. A security vulnerability exists in LangChain versions 0.3.79 and earlier and versions 1.0.0 through 1.0.6, which stems from a template injection that could lead to accessing the...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: OSV:GHSA-6QV9-48XG-FC7F...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: GHSA-6QV9-48XG-FC7F...

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

Context A template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings not just template variables in ChatPromptTemplate...

GHSA-6QV9-48XG-FC7F LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

Context A template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings not just template variables in ChatPromptTemplate...

accessiqlue (2025.12.21154255), agentmanager (>=0.1.0, <=0.1.1) +300 more potentially affected by CVE-2025-65106 via langchain-core (>=1.0.0, <=1.0.5)

langchain-core PYPI version =1.0.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer 2025.12.21193050 - ai-claim-essence 2025.12.20202921 - ai-design-insights 2025.12.21145447 - ai-mysql-translator 2025.12.21101721 - ai-reliability-analyzer 2025.12.21171415 - ai-risk-extractor 2025.12.21102659 -...

accessiqlue (2025.12.21154255), agentmanager (>=0.1.0, <=0.1.1) +300 more potentially affected by CVE-2025-65106 via langchain-core (>=1.0.0, <=1.0.5)

langchain-core PYPI version =1.0.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer 2025.12.21193050 - ai-claim-essence 2025.12.20202921 - ai-design-insights 2025.12.21145447 - ai-mysql-translator 2025.12.21101721 - ai-reliability-analyzer 2025.12.21171415 - ai-risk-extractor 2025.12.21102659 -...

PT-2025-47809

Name of the Vulnerable Software and Affected Versions LangChain versions 0.3.79 and prior LangChain versions 1.0.0 through 1.0.6 Description LangChain is a framework used for building agents and applications powered by Large Language Models LLMs. A template injection issue exists in the prompt...

@ai-sdk/angular (>=1.1.0-beta.0, <=1.1.0-beta.8), @ai-sdk/langchain (>=1.1.0-beta.0, <=1.1.0-beta.8) +5 more potentially affected by CVE-2025-48985 via ai (>=5.1.0-beta.0, <=5.1.0-beta.8)

ai NPM version =5.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =1.1.0-beta.0, =2.1.0-beta.0, =1.1.0-beta.0, =3.1.0-beta.0, =2.1.0-beta.0, =2.1.0-beta.8 Source cves: CVE-2025-48985 Source advisory: OSV:GHSA-RWVC-J5JR-MGVH...

Do robots dream of secure networking? Teaching cybersecurity to AI systems

This blog explores how to equip autonomous AI agents with cybersecurity knowledge, enabling them to make informed decisions about internet safety, such as identifying trustworthy links and websites. It demonstrates a proof of concept using LangChain and OpenAI, integrated with the Cisco Umbrella...

abs-langchain-suite (>=0.1.5, <=0.2.0), actava (0.1.1) +235 more potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.1.2)

langgraph-checkpoint PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - abs-langchain-suite =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.2.0a1, =0.2.5a2, =0.0.3rc0, =0.8.0, =0.1.2, =0.1.25 -...

CVE-2025-8709 SQL Injection in langchain-ai/langchain

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

CVE-2025-8709

CVE-2025-8709 affects langgraph-checkpoint-sqlite 2.0.10 in LangGraph’s SQLite store. The root cause is improper string concatenation of filter keys in _get_filter_condition(), allowing SQL injection via filter parameters and potentially exposing all documents and sensitive fields (e.g., password...

langchainlanggraph-checkpoint-sqlite SQL injection vulnerability

langchainlanggraph-checkpoint-sqlite is an open source database connectivity Python library from LangChain. An SQL injection vulnerability exists in langchainlanggraph-checkpoint-sqlite version 2.0.10, which stems from improper handling of the filter operator and could lead to an SQL injection...