{"data":{"ecosystem":"npm","name":"@langchain/core","url":"https://aisecwatch.com/packages/npm/@langchain/core","latestVersion":"1.2.17","firstReleaseAt":"2023-11-22T23:00:09.225Z","repository":"https://github.com/langchain-ai/langchainjs","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-11-22T23:00:09.225Z","integratedVersion":"0.0.0","sdks":["langchain"],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"npm","name":"@cfworker/json-schema","versionSpec":"^4.0.2","scope":"runtime"},{"ecosystem":"npm","name":"js-tiktoken","versionSpec":"^1.0.12","scope":"runtime"},{"ecosystem":"npm","name":"langsmith","versionSpec":">=0.5.0 <1.0.0","scope":"runtime"},{"ecosystem":"npm","name":"mustache","versionSpec":"^4.2.0","scope":"runtime"},{"ecosystem":"npm","name":"p-queue","versionSpec":"^6.6.2","scope":"runtime"},{"ecosystem":"npm","name":"@standard-schema/spec","versionSpec":"^1.1.0","scope":"runtime"},{"ecosystem":"npm","name":"zod","versionSpec":"^3.25.76 || ^4","scope":"runtime"}],"advisories":[{"id":"b68de133-a63f-4d65-ae51-467a67a80c81","url":"https://aisecwatch.com/issues/b68de133-a63f-4d65-ae51-467a67a80c81","cveId":"CVE-2025-68665","title":"CVE-2025-68665: LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and…","severity":"high","publishedAt":"2025-12-24T04:15:45.097Z","affected":["@langchain/core@>= 1.0.0, < 1.1.8 (fixed: 1.1.8)","@langchain/core@< 0.3.80 (fixed: 0.3.80)","langchain@>= 1.0.0, < 1.2.3 (fixed: 1.2.3)","langchain@< 0.3.37 (fixed: 0.3.37)"],"epssScore":0.00793}],"checkedAt":"2026-10-09T21:51:37.056Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}