langchain

vlangchain-core==0.3.86 scope: langchain-core Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 27d AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agents ai ai-agents anthropic chatgpt deepagents

+11 more

enterprise gemini generative-ai langchain langgraph llm multiagent openai pydantic python typescript

Summary

AI summary

Fixed CVE-2026-34070 path‑traversal vulnerability.

Full changelog

Changes since langchain-core==0.3.85

release(core): 0.3.86 (#37242)
fix(core): backport path-traversal fix to v0.3 (CVE-2026-34070, GHSA-qh6h-p6c9-ff54) (#37233)

CVE-2026-34070 — path‑traversal vulnerability (GHSA-qh6h-p6c9-ff54) fixed in backport

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track langchain

Get notified when new releases ship.

About langchain

The agent engineering platform