CVE-2026-41182

3 advisories.

npm/langsmith CVE-2026-41182: medium 5.3, EPSS 0.36%

LangSmith SDK: Streaming token events bypass output redaction

Action: Upgrade langsmith to 0.5.19 or later.

npm i langsmith@0.5.19

introduced	fixed	last affected
0	0.5.19	-

0.5.19

CVE-2026-41182 · published 2026-04-16T01:20:37Z · modified 2026-09-10T03:51:03.075090864Z · JSON

LangSmith SDK: Streaming token events bypass output redaction

Action: Upgrade langsmith to 0.7.31 or later.

pip install langsmith==0.7.31

introduced	fixed	last affected
0	0.7.31	-

0.7.31

CVE-2026-41182 · published 2026-04-16T01:20:37Z · modified 2026-09-10T03:51:03.075090864Z · JSON

LangSmith SDK: Streaming token events bypass output redaction

Action: Upgrade langsmith to 0.7.31 or later.

pip install langsmith==0.7.31

introduced	fixed	last affected
0	0.7.31	-

0.7.31

CVE-2026-41182 · published 2026-07-13T15:02:48.267180Z · modified 2026-07-13T16:31:59.981609575Z · JSON