langchain-anthropic
2 advisories in the AI Sec Watch database name langchain-anthropic. langchain-anthropic (PyPI) has declared an LLM component as a dependency since 2023-12-20. The most recent advisory that names langchain-anthropic and states a fix gives 1.4.6.
Integration package connecting Claude (Anthropic) APIs and LangChain
The first release to declare it was version 0.0.1.
Advisories
Advisories that name langchain-anthropic as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-55443LangChain path confinement flaws expose files outside intended root | Medium | <= 1.4.5 | 1.4.6 | 2026-06-22 |
| GHSA-gr75-jv2w-4656: LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders | Medium | <= 1.4.5 | 1.4.6 | 2026-06-16 |
Dependencies of the latest release
As declared in PyPI metadata for version 1.7.5. Optional extras are listed with their extra name.
- anthropicAnthropic SDK
- langchain-coreLangChain
- pydantic
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.