Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2026-45134
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
- ❌ langsmith-0.1.147-py3-none-any.whl (Vulnerable Library)
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.
Publish Date: 2026-05-27
URL: CVE-2026-45134
CVSS 3 Score Details (7.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-3644-q5cj-c5c7
Release Date: 2026-05-14
Fix Resolution: 0.8.0
Step up your Open Source Security Game with Mend here
CVE-2026-41182
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
- ❌ langsmith-0.1.147-py3-none-any.whl (Vulnerable Library)
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith SDK's output redaction controls (hideOutputs in JS, hide_outputs in Python) do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a new_token event containing the raw token value. These events bypass the redaction pipeline entirely — prepareRunCreateOrUpdateInputs (JS) and _hide_run_outputs (Python) only process the inputs and outputs fields on a run, never the events array. As a result, applications relying on output redaction to prevent sensitive LLM output from being stored in LangSmith will still leak the full streamed content via run events. Version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK fix the issue.
Publish Date: 2026-04-23
URL: CVE-2026-41182
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-rr7j-v2q5-chgv
Release Date: 2026-04-23
Fix Resolution: https://github.com/langchain-ai/langsmith-sdk.git - v0.7.31
Step up your Open Source Security Game with Mend here
CVE-2026-59152
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
- ❌ langsmith-0.1.147-py3-none-any.whl (Vulnerable Library)
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server running the LangSmith SDK's TracingMiddleware can cause that server to read an arbitrary file from its local filesystem and upload the contents to LangSmith as a trace attachment. Depending on how the distributed trace system is deployed, triggering a read may not require authentication. Retrieving the contents requires read access to the LangSmith workspace the traces are sent to. The net effect is a trust-boundary crossing: a party with workspace trace-read access (for example a low-privilege workspace member, a contractor, or a compromised teammate account) gains the ability to read files from any server running TracingMiddleware, a capability outside that workspace's intended trust boundary. This vulnerability is fixed in 0.8.18.
Publish Date: 2026-07-06
URL: CVE-2026-59152
CVSS 3 Score Details (5.0)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-f4xh-w4cj-qxq8
Release Date: 2026-07-06
Fix Resolution: 0.8.18
Step up your Open Source Security Game with Mend here
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtime behavior. When pulling a public prompt by owner/name identifier, the manifest content is controlled by an external party, but prior versions of the SDK did not distinguish this from pulling a prompt within the caller's own organization. This vulnerability is fixed in LangSmith SDK Python 0.8.0 and JS/TS 0.6.0.
Publish Date: 2026-05-27
URL: CVE-2026-45134
CVSS 3 Score Details (7.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-3644-q5cj-c5c7
Release Date: 2026-05-14
Fix Resolution: 0.8.0
Step up your Open Source Security Game with Mend here
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith SDK's output redaction controls (hideOutputs in JS, hide_outputs in Python) do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a new_token event containing the raw token value. These events bypass the redaction pipeline entirely — prepareRunCreateOrUpdateInputs (JS) and _hide_run_outputs (Python) only process the inputs and outputs fields on a run, never the events array. As a result, applications relying on output redaction to prevent sensitive LLM output from being stored in LangSmith will still leak the full streamed content via run events. Version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK fix the issue.
Publish Date: 2026-04-23
URL: CVE-2026-41182
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-rr7j-v2q5-chgv
Release Date: 2026-04-23
Fix Resolution: https://github.com/langchain-ai/langsmith-sdk.git - v0.7.31
Step up your Open Source Security Game with Mend here
Vulnerable Library - langsmith-0.1.147-py3-none-any.whl
Client library to connect to the LangSmith LLM Tracing and Evaluation Platform.
Library home page: https://files.pythonhosted.org/packages/de/f0/63b06b99b730b9954f8709f6f7d9b8d076fa0a973e472efe278089bde42b/langsmith-0.1.147-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20250130134701_RTDPGV/python_UUFPFG/202501301347031/env/lib/python3.8/site-packages/langsmith-0.1.147.dist-info
Dependency Hierarchy:
Found in base branch: main
Vulnerability Details
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server running the LangSmith SDK's TracingMiddleware can cause that server to read an arbitrary file from its local filesystem and upload the contents to LangSmith as a trace attachment. Depending on how the distributed trace system is deployed, triggering a read may not require authentication. Retrieving the contents requires read access to the LangSmith workspace the traces are sent to. The net effect is a trust-boundary crossing: a party with workspace trace-read access (for example a low-privilege workspace member, a contractor, or a compromised teammate account) gains the ability to read files from any server running TracingMiddleware, a capability outside that workspace's intended trust boundary. This vulnerability is fixed in 0.8.18.
Publish Date: 2026-07-06
URL: CVE-2026-59152
CVSS 3 Score Details (5.0)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-f4xh-w4cj-qxq8
Release Date: 2026-07-06
Fix Resolution: 0.8.18
Step up your Open Source Security Game with Mend here