Typescript bindings for langchain
93%
Total Score
67
100
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2024-7774 langchain is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 0.2.19. | 0.0.0 - 0.2.19 | Medium |
AIKIDO-2024-10244 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. langchain is vulnerable to Insertion of Sensitive Information into Log File in versions 0.1.0 - 0.2.17. | 0.1.0 - 0.2.17 | Low |
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^3.25.76 || ^4 | — | — |
langsmith Version >=0.5.0 <1.0.0 | — | — |
@langchain/langgraph Version ^1.3.2 | — | — |
@langchain/langgraph-checkpoint Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant