langsmith vulnerabilities (PyPI)

4 vulnerabilities.

• langsmith PyPI Arbitrary server-side file read in LangSmith SDK TracingMiddleware CVE-2026-59152 Fix available 5.0 MediumJune 19, 2026
• langsmith PyPI LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2026-45134 Fix available 7.1 HighMay 13, 2026
• langsmith PyPI LangSmith SDK: Streaming token events bypass output redaction CVE-2026-41182 Fix available 5.3 MediumApril 16, 2026
• langsmith PyPI LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection CVE-2026-25528 Fix available 5.8 MediumFebruary 9, 2026