{"data":{"id":"b68de133-a63f-4d65-ae51-467a67a80c81","title":"CVE-2025-68665: LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and…","summary":"LangChain JS versions of @langchain/core before 0.3.80 and 1.1.8, and of langchain before 0.3.37 and 1.2.3, contain a serialization injection flaw in the toJSON() method and in JSON.stringify() output. The method does not escape objects carrying the internal 'lc' key when serializing free-form kwargs data. User-controlled input containing that key structure is then treated as a legitimate LangChain object during deserialization instead of plain data.","solution":"Fixed in @langchain/core 0.3.80 and 1.1.8, and in langchain 0.3.37 and 1.2.3.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68665","publishedAt":"2025-12-24T04:15:45.097Z","cveId":"CVE-2025-68665","cweIds":["CWE-502"],"cvssScore":"8.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@langchain/core@>= 1.0.0, < 1.1.8 (fixed: 1.1.8)","@langchain/core@< 0.3.80 (fixed: 0.3.80)","langchain@>= 1.0.0, < 1.2.3 (fixed: 1.2.3)","langchain@< 0.3.37 (fixed: 0.3.37)"],"affectedPackageNames":["@langchain/core","langchain"],"affectedPackageRefs":["npm:@langchain/core","npm:langchain"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","@langchain/core","langchain","LangChain JS"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain JS serialization injection through toJSON and JSON.stringify","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00793,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-r399-636x-v7f6"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:32.303Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-12-22T23:44:17.645Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:42:14.696Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"langchain","fixedVersion":"0.3.37","matchedVersion":"0.3.37","fixReleasedAt":"2025-12-23T00:45:24.744Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:14.544Z"},{"ecosystem":"npm","name":"langchain","fixedVersion":"1.2.3","matchedVersion":"1.2.3","fixReleasedAt":"2025-12-22T23:44:17.645Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:14.544Z"},{"ecosystem":"npm","name":"@langchain/core","fixedVersion":"0.3.80","matchedVersion":"0.3.80","fixReleasedAt":"2025-12-23T00:24:59.090Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:14.544Z"},{"ecosystem":"npm","name":"@langchain/core","fixedVersion":"1.1.8","matchedVersion":"1.1.8","fixReleasedAt":"2025-12-22T23:44:18.990Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:42:14.544Z"}]}}