LangChain AI langsmith-sdk

• CVE-2026-59152 Medium 5.0 Arbitrary server-side file read in LangSmith SDK TracingMiddleware 0.2%
• CVE-2026-45134 High 7.1 LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning 0.2%
• CVE-2026-41182 Medium 5.3 LangSmith SDK: Streaming token events bypass output redaction 0.2%
• CVE-2026-40190 Medium 5.6 LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()` 0.3%
• CVE-2026-25528 Medium 5.8 LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection 0.3%