3 matches found
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
DescriptionThe LangSmith SDK's prompt pull methods pullprompt / pullpromptcommit in Python, pullPrompt / pullPromptCommit in JS/TS fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime...
7.1CVSS5.7AI score0.00344EPSS
SaveExploits0References5Affected Software1
PT-2026-59237
Description The LangSmith SDK's prompt pull methods pull prompt / pull prompt commit in Python, pullPrompt / pullPromptCommit in JS/TS fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtim...
7.1CVSS5.7AI score0.00344EPSS
SaveExploits0References6
20