{"data":{"id":"9e980682-4f78-4018-8a9f-277646c612bb","title":"CVE-2025-65106: LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to…","summary":"CVE-2025-65106 affects LangChain from versions 0.3.79 and prior and 1.0.0 to 1.0.6. A template injection flaw in its prompt template system lets attackers reach Python object internals through template syntax. The issue affects applications that accept untrusted template strings, not just template variables, in ChatPromptTemplate and related prompt template classes.","solution":"This issue has been patched in versions 0.3.80 and 1.0.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-65106","publishedAt":"2025-11-22T03:16:32.933Z","cveId":"CVE-2025-65106","cweIds":["CWE-1336"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-core@>= 1.0.0, <= 1.0.6 (fixed: 1.0.7)","langchain-core@<= 0.3.79 (fixed: 0.3.80)"],"affectedPackageNames":["langchain-core"],"affectedPackageRefs":["pypi:langchain-core"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain template injection via untrusted template strings","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00524,"epssCheckedAt":"2026-11-04T12:08:34.749Z","kevDateAdded":null,"advisoryAliases":["GHSA-6qv9-48xg-fc7f"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:55.444Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-11-19T21:23:26.579Z","daysToFix":-3,"fixCheckedAt":"2026-10-29T21:42:27.622Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"0.3.80","matchedVersion":"0.3.80","fixReleasedAt":"2025-11-19T22:23:17.133Z","daysToFix":-3,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:27.471Z"},{"ecosystem":"pypi","name":"langchain-core","fixedVersion":"1.0.7","matchedVersion":"1.0.7","fixReleasedAt":"2025-11-19T21:23:26.579Z","daysToFix":-3,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:27.471Z"}]}}