Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/10 8:18 p.m.49 views

LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

GHSA-fw9q-39r9-c252: Prototype Pollution via Incomplete Lodash set Guard in langsmith-sdk Severity: Medium CVSS 5.6 Status: Fixed in 0.5.18 --- Summary The LangSmith JavaScript/TypeScript SDK langsmith contains an incomplete prototype pollution fix in its internally vendored lodash set utility. T...

9.8CVSS5.8AI score0.00313EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder