HIGH 7.1 PyPI npm
GHSA-3644-q5cj-c5c7 · CVE-2026-45134 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
Modified: 6/9/2026
package
PyPI / langchain-classic
pkg:pypi/langchain-classic
package
pkg:pypi/langchain-classic
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
Modified: 6/9/2026