AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

langchain-classic

Building applications with LLMs through composability

Declares an LLM dependency since 2025-10-07 (version 1.0.0a1).

PyPILatest 1.0.8First release 2025-10-07Registry page RepositoryChecked 2026-10-09

Advisories

Advisories that name langchain-classic as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.

Advisory	Severity	Affected	Fixed in	Published
CVE-2026-45134GHSA-3644-q5cj-c5c7: LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning	High	< 1.0.7	1.0.7	2026-05-13

Dependencies of the latest release

As declared in PyPI metadata for version 1.0.8. Optional extras are listed with their extra name.

langchain-anthropic[anthropic]LangChain
langchain-aws[aws]LangChain
langchain-azure-ai[azure-ai]Anthropic SDK, Azure AI Inference / Azure OpenAI SDK +2
langchain-cohere[cohere]LangChain
langchain-community[community]LangChain
langchain-coreLangChain
langchain-deepseek[deepseek]LangChain
langchain-fireworks[fireworks]Fireworks AI SDK, LangChain +1
langchain-google-genai[google-genai]LangChain
langchain-google-vertexai[google-vertexai]LangChain
langchain-groq[groq]LangChain
langchain-huggingface[huggingface]LangChain
langchain-mistralai[mistralai]LangChain
langchain-ollama[ollama]LangChain
langchain-openai[openai]LangChain
langchain-perplexity[perplexity]LangChain
langchain-text-splittersLangChain
langchain-together[together]LangChain
langchain-xai[xai]LangChain
langsmithClaude Agent SDK, Google Agent Development Kit +4
sqlalchemyreaches LLM
requestsreaches LLM
pydanticreaches LLM
async-timeout
pyyaml

Tracked packages that depend on it

Among the packages in the registry; not every dependent on PyPI.