package

npm/langsmith

pkg:npm/langsmith

MEDIUM5.6npm

LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

Modified: 9/10/2026

HIGH7.1PyPInpm

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

Modified: 9/10/2026

MEDIUM5.3npmPyPI

LangSmith SDK: Streaming token events bypass output redaction

Modified: 9/10/2026

MEDIUM5.8PyPInpm

LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection

Modified: 9/10/2026