Deserialization of Untrusted Data

Overview @langchain/core is a Core LangChain.js abstractions and schemas Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the toJSON function, which fails to properly escape user-controlled objects containing the lc key during serialization. An attacker ca...