📦 Langchain Core

A serialization injection vulnerability in LangChain's dumps() and dumpd() functions allows attackers to inject malicious data that gets treated as legitimate LangChain objects during deserialization....

This vulnerability allows attackers to inject malicious serialized objects into LangChain applications by exploiting improper escaping of user-controlled data containing the 'lc' key. When deserialize...