PyPI/langchain-nvidia-ai-endpoints: high 7.5

langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

Action: Upgrade langchain-nvidia-ai-endpoints to 1.4.2 or later.

pip install langchain-nvidia-ai-endpoints==1.4.2

Affected

Fixed versions

Sources

• osv: GHSA-g28h-2cmm-rj9x
• https://github.com/langchain-ai/langchain-nvidia/security/advisories/GHSA-g28h-2cmm-rj9x
• https://github.com/langchain-ai/langchain-nvidia/commit/b483c7cad07dd9d5fd0fee2668238c4a08825d86
• https://github.com/langchain-ai/langchain-nvidia
• https://github.com/langchain-ai/langchain-nvidia/releases/tag/libs%2Fai-endpoints%2Fv1.4.2

published 2026-09-24T19:25:36Z · modified 2026-09-24T19:45:04.902493920Z · JSON