Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/07/13 3:02 p.m.•22 views

LangSmith SDK: Streaming token events bypass output redaction

SummaryThe LangSmith SDK's output redaction controls hideOutputs in JS, hideoutputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline...

5.3CVSS6.1AI score0.00358EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/07/13 3:02 p.m.•16 views

PYSEC-2026-2583 LangSmith SDK: Streaming token events bypass output redaction

Summary The LangSmith SDK's output redaction controls hideOutputs in JS, hideoutputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline...

5.3CVSS6.1AI score0.00358EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•19 views

PT-2026-59238

Summary The LangSmith SDK's output redaction controls hideOutputs in JS, hide outputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a new token event containing the raw token value. These events bypass the redaction pipeline...

5.3CVSS6.1AI score0.00358EPSS
SaveExploits0References6
OSV
OSV
•added 2026/04/16 1:20 a.m.•13 views

GHSA-RR7J-V2Q5-CHGV LangSmith SDK: Streaming token events bypass output redaction

Summary The LangSmith SDK's output redaction controls hideOutputs in JS, hideoutputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline...

5.3CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/04/16 1:20 a.m.•46 views

LangSmith SDK: Streaming token events bypass output redaction

Summary The LangSmith SDK's output redaction controls hideOutputs in JS, hideoutputs in Python do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline...

5.3CVSS5.8AI score0.00358EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder