{"schemaVersion":3,"id":"CVE-2025-68665","aliases":["GHSA-r399-636x-v7f6","CGA-223r-3rg6-9vf9","CGA-25rm-rxq9-42fc","CGA-278c-8356-3cfq","CGA-2x8j-qj4h-cv5g","CGA-3557-q6m3-xc2h","CGA-3c65-2xx7-wrvr","CGA-3hwp-2334-qqjx","CGA-3jjc-fcx3-ww8x","CGA-3m85-mppg-6f5p","CGA-3qcw-86mj-cj57","CGA-3whc-7qp7-q4h9","CGA-3x46-j668-9ff9","CGA-3xvx-gv5m-f855","CGA-444w-hhrx-54fw","CGA-49hj-phr4-j8f8","CGA-4c6v-wpv8-4wc9","CGA-4g3w-p3jc-x69v","CGA-4m2j-jcg6-9wj4","CGA-4m34-r5q5-p8vx","CGA-52qv-7p95-63qv","CGA-5g98-7wx4-jfxr","CGA-5jg8-gfq6-8q3g","CGA-5mx3-qxg4-78cr","CGA-5vp9-hqhg-qxg6","CGA-62cx-m75f-72fw","CGA-638p-hw6x-g4gf","CGA-697q-6v32-8pp2","CGA-6p8q-46wh-j7wf","CGA-759r-6vf3-w9g3","CGA-75r6-8qv8-3c46","CGA-79j5-m3xj-rwr2","CGA-79x7-g7h4-v75w","CGA-7fgh-hghj-vvq7","CGA-7frr-465c-4hxm","CGA-7g8p-5j72-pc58","CGA-894r-xfqp-ghmm","CGA-8wxf-m256-2h77","CGA-8x4c-92wr-2gcf","CGA-93c9-7vvc-8p7j","CGA-9f6w-pvpr-3m44","CGA-9p8q-74w2-3v78","CGA-c3pp-wjfc-cg3j","CGA-c5j8-8mmv-v6x7","CGA-c6w2-p6cj-7jpf","CGA-ccv3-ph4j-8qxw","CGA-cgvx-cr2w-2923","CGA-cwmx-8v35-v642","CGA-f3q9-c6hc-g3wv","CGA-f4v7-ppm8-9rxj","CGA-f6fp-55mw-2wm9","CGA-f863-fc5f-hfmr","CGA-f9w7-jgw3-f843","CGA-g3qx-9xr2-g9f4","CGA-g7x2-557f-qx5p","CGA-ggx3-39f5-cpx8","CGA-gh4g-7c26-vx45","CGA-gv74-3x2v-67g9","CGA-h8px-pm69-x4m7","CGA-h99j-4j97-v64f","CGA-hc2g-gvqp-xh59","CGA-hfg8-m89c-9xwh","CGA-hgm2-574w-h286","CGA-hm4q-3m75-wj2c","CGA-hp2v-j23r-39jj","CGA-hr4g-368g-gh5j","CGA-hrwp-gqqg-qcxj","CGA-hxxf-3rvh-hq9j","CGA-j4w2-f8g5-xxcc","CGA-j56c-wh8g-5qhj","CGA-j8pq-m2gx-h8jx","CGA-jcp6-fc6f-vprq","CGA-jh7f-74g7-hcc4","CGA-jq9m-mr6q-c7wv","CGA-jwpg-crpv-8cwf","CGA-jx88-mvx2-4w4q","CGA-m75p-ffgm-fwq4","CGA-m79j-fr6p-fh9q","CGA-mh4f-vwxr-wmwf","CGA-p3xq-62g8-mvg9","CGA-p65v-8rp4-hcwv","CGA-p6gf-hp8v-wpgg","CGA-p6vg-p2qc-p4jm","CGA-pcj4-mh6h-898q","CGA-pmw9-96jx-62vm","CGA-pvr5-g5p7-c88r","CGA-pvr9-7jf3-qw28","CGA-qf8g-5jf8-5w37","CGA-qg52-xf64-vfhw","CGA-qw43-74cf-jcqp","CGA-qx4m-f5cc-725h","CGA-qxx9-gqf3-f8f6","CGA-r3c2-hpxw-94f2","CGA-r5j5-pqj2-hxg7","CGA-r6q6-8qgh-mcqq","CGA-r6r7-gv5g-8v8x","CGA-rvx4-7fj3-47r9","CGA-rw8g-9hrc-qm3g","CGA-v4gh-pw5q-c6hc","CGA-v4jx-cfm6-7fr8","CGA-vjg8-jgc4-h29x","CGA-vwwp-2xc4-9fxq","CGA-w3q2-pmmg-2jg6","CGA-w76c-64f9-7p7f","CGA-wmmm-85r8-fvhj","CGA-wq53-wg78-pq4h","CGA-x4jj-mr38-jcrg","CGA-x96q-q5vx-ff9h","CGA-xcg6-6qqr-jr47","CGA-xj8q-cmwm-8p9j","CGA-xvcr-c5w5-g9gh"],"status":"published","duplicateOf":null,"title":null,"description":"LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON() method (and subsequently when string-ifying objects using JSON.stringify(). The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in @langchain/core versions 0.3.80 and 1.1.8, and langchain versions 0.3.37 and 1.2.3","dates":{"published":"2025-12-23T22:56:04.837Z","modified":"2025-12-24T14:38:40.268Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.1,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00793,"percentile":0.55598,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00793},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00805,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00805,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00805,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00805,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00793,"percentile":0.55598}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00793,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00793,"percentile":0.55598}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-502","name":"Deserialization of Untrusted Data","description":"The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/502.html"}],"affected":[{"vendor":"chainguard","product":"kibana-8.17","name":"kibana-8.17","label":"kibana-8.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17","purlType":"apk","versions":[{"text":"< 8.17.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-bitnami","name":"kibana-8.17-bitnami","label":"kibana-8.17-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-bitnami","purlType":"apk","versions":[{"text":"< 8.17.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.17-iamguarded","name":"kibana-8.17-iamguarded","label":"kibana-8.17-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.17-iamguarded","purlType":"apk","versions":[{"text":"< 8.17.10-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.17.10-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18","name":"kibana-8.18","label":"kibana-8.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18","purlType":"apk","versions":[{"text":"< 8.18.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-bitnami","name":"kibana-8.18-bitnami","label":"kibana-8.18-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-bitnami","purlType":"apk","versions":[{"text":"< 8.18.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.18-iamguarded","name":"kibana-8.18-iamguarded","label":"kibana-8.18-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.18-iamguarded","purlType":"apk","versions":[{"text":"< 8.18.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.18.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19","name":"kibana-8.19","label":"kibana-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19","purlType":"apk","versions":[{"text":"< 8.19.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.9-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-bitnami","name":"kibana-8.19-bitnami","label":"kibana-8.19-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-bitnami","purlType":"apk","versions":[{"text":"< 8.19.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.9-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-8.19-iamguarded","name":"kibana-8.19-iamguarded","label":"kibana-8.19-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-8.19-iamguarded","purlType":"apk","versions":[{"text":"< 8.19.9-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.9-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0","name":"kibana-9.0","label":"kibana-9.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0","purlType":"apk","versions":[{"text":"< 9.0.8-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-bitnami","name":"kibana-9.0-bitnami","label":"kibana-9.0-bitnami","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-bitnami","purlType":"apk","versions":[{"text":"< 9.0.8-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.0-iamguarded","name":"kibana-9.0-iamguarded","label":"kibana-9.0-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.0-iamguarded","purlType":"apk","versions":[{"text":"< 9.0.8-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.8-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1","name":"kibana-9.1","label":"kibana-9.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1","purlType":"apk","versions":[{"text":"< 9.1.9-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.9-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.1-iamguarded","name":"kibana-9.1-iamguarded","label":"kibana-9.1-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.1-iamguarded","purlType":"apk","versions":[{"text":"< 9.1.9-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.1.9-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"< 9.2.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2-iamguarded","name":"kibana-9.2-iamguarded","label":"kibana-9.2-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2-iamguarded","purlType":"apk","versions":[{"text":"< 9.2.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2","name":"langfuse-2","label":"langfuse-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-compat","name":"langfuse-2-compat","label":"langfuse-2-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-compat","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-2-worker","name":"langfuse-2-worker","label":"langfuse-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2","name":"langfuse-fips-2","label":"langfuse-fips-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-compat","name":"langfuse-fips-2-compat","label":"langfuse-fips-2-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-compat","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-2-worker","name":"langfuse-fips-2-worker","label":"langfuse-fips-2-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-2-worker","purlType":"apk","versions":[{"text":"< 2.95.12-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.95.12-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat-compat","name":"librechat-compat","label":"librechat-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat-compat","purlType":"apk","versions":[{"text":"< 0.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat-dev","name":"librechat-dev","label":"librechat-dev","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat-dev","purlType":"apk","versions":[{"text":"< 0.8.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.1-r1","eol":null,"hubHref":null},{"vendor":"langchain-ai","product":"langchainjs","name":"langchainjs","label":"langchainjs","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"@langchain/core >= 1.0.0, < 1.1.8","noFixRecorded":false,"fixedIn":null},{"text":"@langchain/core < 0.3.80","noFixRecorded":false,"fixedIn":null},{"text":"langchain >= 1.0.0, < 1.2.3","noFixRecorded":false,"fixedIn":null},{"text":"langchain < 0.3.37","noFixRecorded":false,"fixedIn":null}],"versionsText":"@langchain/core >= 1.0.0, < 1.1.8 | @langchain/core < 0.3.80 | langchain >= 1.0.0, < 1.2.3 | langchain < 0.3.37","eol":null,"hubHref":"/vendor/langchain-ai/langchainjs"},{"vendor":"langchain","product":"langchain\\/core","name":"langchain\\/core","label":"langchain\\/core","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.3.80","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.0.0, < 1.1.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.80 | ≥ 1.0.0, < 1.1.8","eol":null,"hubHref":"/vendor/langchain/langchaincore"},{"vendor":"langchain","product":"langchain.js","name":"langchain.js","label":"langchain.js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.3.37","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.0.0, < 1.2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.37 | ≥ 1.0.0, < 1.2.3","eol":null,"hubHref":"/vendor/langchain/langchainjs"},{"vendor":"Npm","product":"langchain","name":"langchain","label":"langchain","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/langchain","purlType":"npm","versions":[{"text":"≥ 1.0.0, < 1.2.3","noFixRecorded":false,"fixedIn":null},{"text":"< 0.3.37","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.2.3 | < 0.3.37","eol":null,"hubHref":null},{"vendor":"@langchain","product":"core","name":"@langchain/core","label":"core","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@langchain/core","purlType":"npm","versions":[{"text":"≥ 1.0.0, < 1.1.8","noFixRecorded":false,"fixedIn":null},{"text":"< 0.3.80","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.0.0, < 1.1.8 | < 0.3.80","eol":null,"hubHref":null}],"affectedCount":30,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-r399-636x-v7f6","label":"github.com/langchain-ai/langchainjs/security/advisories/GHSA-r399-636x-v7f6","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","Advisory","Vendor Advisory"]},{"url":"https://github.com/langchain-ai/langchainjs/commit/e5063f9c6e9989ea067dfdff39262b9e7b6aba62","label":"github.com/langchain-ai/langchainjs/commit/e5063f9c6e9989ea067dfdff39262b9e7b6aba62","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","Patch"]},{"url":"https://github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcore%401.1.8","label":"github.com/langchain-ai/langchainjs/releases/tag/%40langchain%2Fcore%401.1.8","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://github.com/langchain-ai/langchainjs/releases/tag/langchain%401.2.3","label":"github.com/langchain-ai/langchainjs/releases/tag/langchain%401.2.3","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68665","label":"nvd.nist.gov/vuln/detail/CVE-2025-68665","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/langchain-ai/langchainjs","label":"github.com/langchain-ai/langchainjs","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68665.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68665.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-653Q-7MQW-VH62","CGA-85GF-57XG-6WJ7","CGA-JRJ3-4996-4C57"]},"timeline":[{"kind":"published","date":"2025-12-23T22:56:04.837Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-12-24T14:38:40.268Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:59:24.506Z","stale":false,"partial":false}}