Langchain-ai Langsmith-sdk vulnerabilities
- langchain-ai langsmith-sdkArbitrary server-side file read in LangSmith SDK TracingMiddleware5.0 Medium
- langchain-ai langsmith-sdkLangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning7.1 High
- langchain-ai langsmith-sdkLangSmith SDK: Streaming token events bypass output redaction5.3 Medium
- langchain langsmith, langchain-ai langsmith-sdk +1 moreLangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`5.6 Medium
- langchain-ai langsmith-sdkLangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection5.8 Medium