langchain
1.5.0The agent engineering platform.
- Maintenance
- Active685 commits in 3 months · bus factor 5
- License
- MITPermissive · OSI-approved
- Security
- 9 advisories1 critical, 3 high, 3 medium, 2 low · Scorecard 5.8/10
- Supported versions
- No scheduleendoflife.date does not track this project
150k stars · 25.1k forks · 743 open issues · last release 3 days ago · data checked 2 hours ago
Security advisories
All advisories on GitHubThe 9 most recent advisories published by the maintainers: 1 critical, 3 high, 3 medium, 2 low. Check the patched version against the one you run.
- mediumCVE-2026-55443Jun 12, 2026Path traversal and sandbox escape in LangChain file-search middleware and loaders
- Affected
- <= 1.3.8; <= 1.4.5
- Patched in
- 1.3.9; 1.4.6
- highCVE-2026-44843May 5, 2026Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists
- Affected
- <=1.3.2,>=1; <=0.3.84
- Patched in
- 1.3.3; 0.3.85
- lowCVE-2026-41488Apr 16, 2026Image token counting SSRF protection can be bypassed via DNS rebinding
- Affected
- <1.1.14
- Patched in
- >=1.1.14
- mediumCVE-2026-41481Apr 16, 2026HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
- Affected
- <1.1.2
- Patched in
- >=1.1.2
- mediumCVE-2026-40087Apr 8, 2026Incomplete f-string validation in prompt templates
- Affected
- <0.3.83; <1.2.28,>1
- Patched in
- 0.3.84; 1.2.28
- highCVE-2026-34070Mar 26, 2026Path traversal in legacy `load_prompt` functions in `langchain-core` (CWE-22)
- Affected
- <1.2.22
- Patched in
- >=1.2.22
- lowCVE-2026-26013Feb 10, 2026SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
- Affected
- 0.3.81
- criticalCVE-2025-68664Dec 23, 2025LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
- Affected
- < 1.2.5, >= 1.0.0; < 0.3.81
- Patched in
- 1.2.5; 0.3.81
- highCVE-2025-65106Nov 19, 2025Template Injection via Attribute Access in Prompt Templates
- Affected
- <1.0.6,>=1.0.0; <=0.3.79
- Patched in
- 1.0.7; 0.3.80