Fix MVS-2023-gwm8-m3c2: bump langchain-core, langchain-openai, langsmith (4 CVEs) - #273

Closed

EvanderDS (EvanderDS) wants to merge 2 commits into

microsoft:mainfrom

EvanderDS:s360-fix/langchain-core-cve-2026-44843

Commits on Sep 11, 2026

Fix GHSA-pjwx-r37v-7724 (CVE-2026-44843): bump langchain-core constraint to >=1.3.3
Copilot
committed
5f66a91
Also fix CVE-2026-41488 (langchain-openai), CVE-2026-45134 + GHSA-f4xh-w4cj-qxq8 (langsmith)
Copilot
committed
5835f20