langchain_core vulnerabilities

CVEs whose affected-version data names the langchain_core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-34070High· 7.5PoC

5mo ago

LangChain is a framework for building agents and LLM-powered applications

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating again…

▾ Midnightlangchain · langchain_coreEPSS 1.4%via NVD