Cloudanix VulnDB

GHSA-r399-636x-v7f6

High · 8.6

CVSS

8.6

EPSS

—

Published

Dec 23, 2025

CISA due date

—

The record

LangChain serialization injection vulnerability enables secret extraction

Affected packages

Ecosystem Package Introduced Fixed
npm @langchain/core 0 0.3.80
npm @langchain/core 1.0.0 1.1.8
npm langchain 0 0.3.37
npm langchain 1.0.0 1.2.3
Chainguard kibana-8.17 0 8.17.10-r6
Chainguard kibana-8.17-bitnami 0 8.17.10-r6
Chainguard kibana-8.17-iamguarded 0 8.17.10-r6
Chainguard kibana-8.18 0 8.18.8-r6
Chainguard kibana-8.18-bitnami 0 8.18.8-r6
Chainguard kibana-8.18-iamguarded 0 8.18.8-r6
Chainguard kibana-8.19 0 8.19.9-r2
Chainguard kibana-8.19-bitnami 0 8.19.9-r2
Chainguard kibana-8.19-iamguarded 0 8.19.9-r2
Chainguard kibana-9.0 0 9.0.8-r5
Chainguard kibana-9.0-bitnami 0 9.0.8-r5
Chainguard kibana-9.0-iamguarded 0 9.0.8-r5
Chainguard kibana-9.1 0 9.1.9-r1
Chainguard kibana-9.1-bitnami 0 9.1.9-r1
Chainguard kibana-9.1-iamguarded 0 9.1.9-r1
Chainguard kibana-9.2 0 9.2.3-r1
Chainguard kibana-9.2-iamguarded 0 9.2.3-r1
Chainguard langfuse-2 0 2.95.12-r4
Chainguard langfuse-2-compat 0 2.95.12-r4
Chainguard langfuse-2-worker 0 2.95.12-r4
Chainguard langfuse-fips-2 0 2.95.12-r4
Chainguard langfuse-fips-2-compat 0 2.95.12-r4
Chainguard langfuse-fips-2-worker 0 2.95.12-r4
Chainguard librechat 0 0.8.1-r1
Chainguard librechat-compat 0 0.8.1-r1
Chainguard librechat-dev 0 0.8.1-r1

Related vulnerabilities