langchain-nvidia-ai-endpoints
1 advisory in the AI Sec Watch database names langchain-nvidia-ai-endpoints. langchain-nvidia-ai-endpoints (PyPI) has declared an LLM component as a dependency since 2023-12-15. The most recent advisory that names langchain-nvidia-ai-endpoints and states a fix gives 1.4.2.
An integration package connecting NVIDIA AI Endpoints and LangChain
The first release to declare it was version 0.0.1.
Advisories
Advisories that name langchain-nvidia-ai-endpoints as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| GHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs | High | <= 1.4.1 | 1.4.2 | 2026-09-24 |
Dependencies of the latest release
As declared in PyPI metadata for version 1.4.3. Optional extras are listed with their extra name.
- langchain-coreLangChain
- aiohttp
- requests
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.