ai tool
LangChain: security advisories, deprecations and releases
Framework for building applications and agents on language models.
- Items, 90 days
- 16
- Critical
- 0
- Last critical
- none
- This week
- 7
What your digest would have held this week
7 items from the last 7 days. Zero sends only the ones that touch your stack.
Security 2
- HIGH Datadog Security Labs · 15 Oct 2026
Jev as a judge: How counterfeit policy steers Jev
Research shows counterfeit classification policies can bypass Jev's prompt injection detection and LangChain tool-risk gating.
- HIGH Google Cloud Blog · 2 Oct 2026
2,076 AI-stack vulnerabilities disclosed
GTIG tracked 2,076 AI-related CVEs from January 2025 to August 2026, concentrated in orchestration frameworks, inference engines, and web portals.
Deprecations 1
- MEDIUM NEW THIS WEEK LangChain releases · 2 Nov 2026
langchain-core 1.7.4 released; Python 3.10 support ends in 1.8.0
langchain-core 1.7.4 is out. Python 3.10 support will be dropped in 1.8.0; upgrade to Python 3.11+.
Releases 13
- INFO NEW THIS WEEK LangChain releases · 2 Nov 2026
langchain-anthropic 1.7.9 release
Patch release fixing token reporting for streamed content blocks to callbacks.
- INFO NEW THIS WEEK LangChain releases · 2 Nov 2026
langchain==1.4.8 released
Python 3.10 support ends in langchain 1.5.0 and langchain-core 1.8.0; this release is the final minor supporting 3.10.
- INFO NEW THIS WEEK LangChain releases · 2 Nov 2026
langchain-anthropic==1.7.8 released
Patch release fixes two token-count and index-handling bugs in Anthropic integration.
- INFO NEW THIS WEEK LangChain releases · 29 Oct 2026
langchain-core 1.7.2 released
Adds notification metadata helpers and fixes merge_content mutating the first message.
- INFO NEW THIS WEEK LangChain releases · 28 Oct 2026
langchain-core 1.7.1 released
Bug fixes for gateway tracing metadata preservation and Mermaid label escaping plus dependency bumps.
- INFO NEW THIS WEEK LangChain releases · 28 Oct 2026
langchain-anthropic==1.7.7 released
Patch release fixes reasoning-effort tracing, relaxes dependency bounds, updates certifi, and resolves partner-package dependency issues.
- INFO LangChain releases · 27 Oct 2026
langchain-openai 1.7.3 released
Minor release bumps aiohttp, certifi, requests and other dependencies; refreshes model profiles; fixes test-only Pillow build and dependency issues.
- MEDIUM LangChain releases · 22 Oct 2026
langchain-core==1.7.0 streaming change for tool calls
langchain-core 1.7.0 now emits tool-call-delta events instead of block-delta when streaming tool call arguments. Existing tool_calls and output remain unchanged.
- INFO LangChain releases · 21 Oct 2026
langchain-core 1.6.13 released
New release adds tool-call-delta streaming support and bumps certifi dependency.
- INFO LangChain releases · 17 Oct 2026
langchain-core 1.6.12 release
Bug fix release that propagates extras on content-block-start events.
- INFO LangChain releases · 14 Oct 2026
langchain==1.4.6 released
Adds opt-in per-call interrupts to the human-in-the-loop middleware.
- INFO LangChain releases · 9 Oct 2026
langchain 1.4.4 released
Patch release fixes SummarizationMiddleware retry on context overflow and bumps several transitive dependencies.
- INFO LangChain releases · 3 Oct 2026
langchain 1.4.3 release
Patch release fixes cache sanitization for fallback models, repairs invalid tool calls in create_agent, and adds Bedrock Mantle chat model support.
Only hear about LangChain when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.