Loading
An integration package connecting OpenAI and LangChain
Declares an LLM dependency since 2024-01-05 (version 0.0.1rc0).
Advisories that name langchain-openai as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| GHSA-r7w7-9xr2-qq2r: langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding | Low | < 1.1.14 | 1.1.14 | 2026-04-16 |
As declared in PyPI metadata for version 1.7.0. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.