Langsmith vulnerabilities

2 known vulnerabilities in Langsmith from LangChain. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  langsmith-sdk: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-40190Apr 10, 2026LangChain AI

  LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.5.18, the LangSmith JavaScript/TypeScript SDK (langsmith) contains an incomplete prototype pollution fix in its internally vendored lodash set() utility. The baseAssign

• 8.1 High severity

  helm: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-25750Mar 4, 2026LangChain AI

  Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts thro