{"ecosystem":"pypi","package":"langchain","tool_id":"pypi:langchain","listed":true,"list_version":"2026-11-05","as_of":"2026-11-05T15:44:30.458Z","version":"1.4.9","version_source":"registry_latest","security_status":"clear","status_basis":"no_match_on_version","verdict":"insufficient","advisories":{"source":"osv","checked":true,"checked_at":"2026-11-05T14:01:53.414Z","matching_version":0,"other_versions":23,"any_version":23,"malicious_records":0,"exploited_in_wild":0,"list":[{"id":"GHSA-8h5w-f6q9-wg35","kind":"vulnerability","aliases":["CVE-2023-32785","PYSEC-2026-372"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-10-21T00:30:47Z","url":"https://osv.dev/vulnerability/GHSA-8h5w-f6q9-wg35"},{"id":"GHSA-gr75-jv2w-4656","kind":"vulnerability","aliases":["CVE-2026-55443","PYSEC-2026-2192","PYSEC-2026-2556"],"affects_version":false,"fixed":["1.3.9"],"published":"2026-06-16T15:03:14Z","url":"https://osv.dev/vulnerability/GHSA-gr75-jv2w-4656"},{"id":"GHSA-3644-q5cj-c5c7","kind":"vulnerability","aliases":["CVE-2026-45134","PYSEC-2026-2555","PYSEC-2026-2560","PYSEC-2026-2582"],"affects_version":false,"fixed":["0.3.30"],"published":"2026-05-13T15:29:30Z","url":"https://osv.dev/vulnerability/GHSA-3644-q5cj-c5c7"},{"id":"GHSA-3hjh-jh2h-vrg6","kind":"vulnerability","aliases":["CVE-2024-2965","PYSEC-2024-118","PYSEC-2026-2561"],"affects_version":false,"fixed":["0.2.5","73c42306745b0831aa6fe7fe4eeb70d2c2d87a82"],"published":"2024-06-06T21:30:36Z","url":"https://osv.dev/vulnerability/GHSA-3hjh-jh2h-vrg6"},{"id":"PYSEC-2024-323","kind":"vulnerability","aliases":["CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514"],"affects_version":false,"fixed":["0.2.9"],"published":"2024-09-17T12:15:02.977Z","url":"https://osv.dev/vulnerability/PYSEC-2024-323"},{"id":"GHSA-6h8p-4hx9-w66c","kind":"vulnerability","aliases":["CVE-2023-32786","PYSEC-2026-1508"],"affects_version":false,"fixed":["0.0.329"],"published":"2023-10-21T00:30:47Z","url":"https://osv.dev/vulnerability/GHSA-6h8p-4hx9-w66c"},{"id":"GHSA-45pg-36p6-83v9","kind":"vulnerability","aliases":["CVE-2024-8309","PYSEC-2024-115","PYSEC-2026-1507"],"affects_version":false,"fixed":["0.2.0"],"published":"2024-10-29T15:32:05Z","url":"https://osv.dev/vulnerability/GHSA-45pg-36p6-83v9"},{"id":"GHSA-rgp8-pm28-3759","kind":"vulnerability","aliases":["CVE-2024-3571","PYSEC-2026-1510"],"affects_version":false,"fixed":["0.0.353"],"published":"2024-04-16T00:30:34Z","url":"https://osv.dev/vulnerability/GHSA-rgp8-pm28-3759"},{"id":"GHSA-h9j7-5xvc-qhg5","kind":"vulnerability","aliases":["CVE-2024-0243","PYSEC-2024-235","PYSEC-2026-1509"],"affects_version":false,"fixed":["0.1.0"],"published":"2024-02-26T18:30:29Z","url":"https://osv.dev/vulnerability/GHSA-h9j7-5xvc-qhg5"},{"id":"GHSA-57fc-8q82-gfp3","kind":"vulnerability","aliases":["CVE-2023-36188","PYSEC-2023-109"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-07-06T15:30:33Z","url":"https://osv.dev/vulnerability/GHSA-57fc-8q82-gfp3"},{"id":"GHSA-7gfq-f96f-g85j","kind":"vulnerability","aliases":["CVE-2023-36281","PYSEC-2023-151"],"affects_version":false,"fixed":["0.0.312","0.0.171"],"published":"2023-08-22T21:30:27Z","url":"https://osv.dev/vulnerability/GHSA-7gfq-f96f-g85j"},{"id":"GHSA-prgp-w7vf-ch62","kind":"vulnerability","aliases":["CVE-2023-39659","PYSEC-2023-147"],"affects_version":false,"fixed":["0.0.325","0.0.233"],"published":"2023-08-15T18:31:32Z","url":"https://osv.dev/vulnerability/GHSA-prgp-w7vf-ch62"},{"id":"GHSA-92j5-3459-qgp4","kind":"vulnerability","aliases":["CVE-2023-38896","PYSEC-2023-146"],"affects_version":false,"fixed":["0.0.236","0.0.195"],"published":"2023-08-15T18:31:32Z","url":"https://osv.dev/vulnerability/GHSA-92j5-3459-qgp4"},{"id":"GHSA-fj32-q626-pjjc","kind":"vulnerability","aliases":["CVE-2023-38860","PYSEC-2023-145"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-08-15T18:31:32Z","url":"https://osv.dev/vulnerability/GHSA-fj32-q626-pjjc"},{"id":"GHSA-gwqq-6vq7-5j86","kind":"vulnerability","aliases":["CVE-2023-36095","PYSEC-2023-138"],"affects_version":false,"fixed":["0.0.236"],"published":"2023-08-05T03:30:19Z","url":"https://osv.dev/vulnerability/GHSA-gwqq-6vq7-5j86"},{"id":"GHSA-2qmj-7962-cjq8","kind":"vulnerability","aliases":["CVE-2023-36258","PYSEC-2023-98"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-07-03T21:30:57Z","url":"https://osv.dev/vulnerability/GHSA-2qmj-7962-cjq8"},{"id":"GHSA-6643-h7h5-x9wh","kind":"vulnerability","aliases":["CVE-2023-34541","PYSEC-2023-92"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-06-20T15:31:09Z","url":"https://osv.dev/vulnerability/GHSA-6643-h7h5-x9wh"},{"id":"GHSA-x32c-59v5-h7fg","kind":"vulnerability","aliases":["CVE-2023-34540","PYSEC-2023-91"],"affects_version":false,"fixed":["0.0.225"],"published":"2023-06-14T15:30:39Z","url":"https://osv.dev/vulnerability/GHSA-x32c-59v5-h7fg"},{"id":"GHSA-655w-fm8m-m478","kind":"vulnerability","aliases":["CVE-2023-46229","PYSEC-2023-205"],"affects_version":false,"fixed":["0.0.317","9ecb7240a480720ec9d739b3877a52f76098a2b8"],"published":"2023-10-19T06:30:23Z","url":"https://osv.dev/vulnerability/GHSA-655w-fm8m-m478"},{"id":"GHSA-fprp-p869-w6q2","kind":"vulnerability","aliases":["CVE-2023-29374","PYSEC-2023-18"],"affects_version":false,"fixed":["0.0.132"],"published":"2023-04-05T03:30:17Z","url":"https://osv.dev/vulnerability/GHSA-fprp-p869-w6q2"},{"id":"GHSA-7q94-qpjr-xpgm","kind":"vulnerability","aliases":["CVE-2023-36189","PYSEC-2023-110"],"affects_version":false,"fixed":["0.0.247"],"published":"2023-07-06T15:30:33Z","url":"https://osv.dev/vulnerability/GHSA-7q94-qpjr-xpgm"},{"id":"GHSA-f73w-4m7g-ch9x","kind":"vulnerability","aliases":["CVE-2023-39631","PYSEC-2023-162","PYSEC-2023-163"],"affects_version":false,"fixed":["0.0.308"],"published":"2023-09-01T18:30:41Z","url":"https://osv.dev/vulnerability/GHSA-f73w-4m7g-ch9x"},{"id":"GHSA-h59x-p739-982c","kind":"vulnerability","aliases":["CVE-2024-28088","PYSEC-2024-43","PYSEC-2024-45"],"affects_version":false,"fixed":["0.0.339","0.1.11"],"published":"2024-03-04T00:30:53Z","url":"https://osv.dev/vulnerability/GHSA-h59x-p739-982c"}],"list_url":"https://osv.dev/list?ecosystem=PyPI&q=langchain"},"field_reports":{"on_version":0,"outcomes":null,"people":0,"verified_people":0,"forge_score":null,"all_versions":0,"versions_reported":[],"tool_page_url":"https://theagentforge.io/t/pypi%3Alangchain"},"skill_scan":null,"other_versions_flagged":[],"check":{"tool":"forge_check","mcp_server":"https://theagentforge.io/mcp/public","arguments":{"id":"pypi:langchain","version":"1.4.9"},"rest_url":"https://theagentforge.io/api/v1/check?id=pypi%3Alangchain&version=1.4.9","cli":"npx @theagentforge/cli check pypi:langchain@1.4.9"},"sources":{"osv":"https://osv.dev/list?ecosystem=PyPI&q=langchain","registry":"https://pypi.org/project/langchain/","methodology":"https://theagentforge.io/methodology"},"page_url":"https://theagentforge.io/is-it-safe/pypi/langchain","markdown_url":"https://theagentforge.io/is-it-safe/pypi/langchain.md"}