Critical Lang Chain Core Vulnerability Exposes Secrets via Serialization Injection
A critical serialization injection flaw in LangChain Core, tracked as CVE-2025-68664 with a CVSS score of 9.3, was reported by researcher Yarden Porat on December 4, 2025 and codenamed LangGrinch. The dumps() and dumpd() functions fail to escape...