langchain-core vulnerabilities (Root)
5 vulnerabilities.
-
langchain-coreRoot LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists 8.2 High -
langchain-coreRoot LangChain has incomplete f-string validation in prompt templates 5.3 Medium -
langchain-coreRoot LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions 7.5 High -
langchain-coreRoot LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs 9.3 Critical -
langchain-coreRoot LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates 8.3 High