@langchain/core

Core LangChain.js abstractions and schemas

Latest 1.2.17

87%

Total Score

healthy

Active releases and broad project activity support this release, while workflow template-injection and inherited-secrets findings reduce confidence.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 22 workflows were analyzed and references are fully pinned, with 18 workflows using read-only permissions. However, five high-confidence template-injection findings and high-confidence secrets-inherit findings remain, while trusted-publishing is also flagged; the pull_request_target workflow has no reported untrusted checkout or script-injection sink, so this is caution rather than a standalone severe verdict.

Vulnerabilities

Title	Versions	Severity
CVE-2025-68665 @langchain/core is vulnerable to Deserialization of Untrusted Data in versions 1.0.0 - 1.1.8 and 0.0.0 - 0.3.80.	0.0.0 - 0.3.801.0.0 - 1.1.8	High
AIKIDO-2025-10389 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @langchain/core is vulnerable to Use of Weak Hash in versions 0.0.0 - 0.3.59.	0.0.0 - 0.3.59	Low

Package versions

Maintainers

lc-oss-admin

langchain-security

Direct Dependencies

Dependency	Last Release	Score
zod Version ^3.25.76 \|\| ^4	—	—
p-queue Version ^6.6.2	—	—
mustache Version ^4.2.0	—	—
langsmith Version >=0.5.0 <1.0.0	—	—
js-tiktoken Version ^1.0.12	—	—