{"data":{"id":"405115eb-9c98-4ab8-b561-3ab4a5551fa8","title":"GHSA-rr7j-v2q5-chgv: LangSmith SDK: Streaming token events bypass output redaction","summary":"The LangSmith SDK's output redaction controls, hideOutputs in JS and hide_outputs in Python, do not cover streaming token events. Each streamed chunk is recorded as a new_token event holding the raw token value, and the redaction pipeline only processes the inputs and outputs fields, never the events array. Applications that rely on output redaction to keep sensitive LLM output out of LangSmith still leak the full streamed content through run events. Both the JS and Python SDKs are affected.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://github.com/advisories/GHSA-rr7j-v2q5-chgv","publishedAt":"2026-04-16T01:20:37.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":["langsmith@<= 0.7.30 (fixed: 0.7.31)","langsmith@<= 0.5.18 (fixed: 0.5.19)"],"affectedPackageNames":["langsmith"],"affectedPackageRefs":["npm:langsmith","pypi:langsmith"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangSmith","LangSmith SDK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-rr7j-v2q5-chgv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-16T01:20:37.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}