GHSA-rr7j-v2q5-chgv

Suggest an improvement
Source
https://github.com/advisories/GHSA-rr7j-v2q5-chgv
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-rr7j-v2q5-chgv/GHSA-rr7j-v2q5-chgv.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-rr7j-v2q5-chgv
Aliases
  • CVE-2026-41182
Downstream
Related
Published
2026-04-16T01:20:37Z
Modified
2026-05-06T20:14:18.221660394Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
LangSmith SDK: Streaming token events bypass output redaction
Details

Summary

The LangSmith SDK's output redaction controls (hideOutputs in JS, hideoutputs in Python) do not apply to streaming token events. When an LLM run produces streaming output, each chunk is recorded as a newtoken event containing the raw token value. These events bypass the redaction pipeline entirely — prepareRunCreateOrUpdateInputs (JS) and hiderun_outputs (Python) only process the inputs and outputs fields on a run, never the events array. As a result, applications relying on output redaction to prevent sensitive LLM output from being stored in LangSmith will still leak the full streamed content via run events.

Details

Both JS and Python SDKs are affected. The same pattern exists in both:

  • JS SDK: traceable.ts:997-1003 and traceable.ts:1044-1050
  • Python SDK: run_helpers.py:1924 and run_helpers.py:1996

In both SDKs, new_token events with raw kwargs.token values are added during streaming, and the redaction pipeline (hideOutputs in JS, hide_outputs in Python) only processes inputs/outputs — never events.

Database specific 
{
    "nvd_published_at": "2026-04-23T02:16:16Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-200",
        "CWE-359",
        "CWE-532"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-04-16T01:20:37Z"
}
References

Affected packages

npm / langsmith

Package

Name
langsmith
View open source insights on deps.dev
Purl
pkg:npm/langsmith

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.19

Database specific

last_known_affected_version_range 
"<= 0.5.18"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-rr7j-v2q5-chgv/GHSA-rr7j-v2q5-chgv.json"

PyPI / langsmith

Package

Name
langsmith
View open source insights on deps.dev
Purl
pkg:pypi/langsmith

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.31

Affected versions

0.*
0.0.0rc0
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.6
0.0.7
0.0.8
0.0.9
0.0.10
0.0.11
0.0.12
0.0.13
0.0.14
0.0.15
0.0.16
0.0.18
0.0.19
0.0.20
0.0.21
0.0.22
0.0.23
0.0.24
0.0.25
0.0.26
0.0.27
0.0.28
0.0.29
0.0.30
0.0.31
0.0.32
0.0.33
0.0.34
0.0.35
0.0.36
0.0.37
0.0.38
0.0.39
0.0.40
0.0.41
0.0.42
0.0.43
0.0.44
0.0.45
0.0.46
0.0.47
0.0.48
0.0.49
0.0.50
0.0.51
0.0.52
0.0.53
0.0.54
0.0.55
0.0.56
0.0.57
0.0.58
0.0.59
0.0.60
0.0.61
0.0.62
0.0.63
0.0.64
0.0.65
0.0.66
0.0.67
0.0.68
0.0.69
0.0.70
0.0.71
0.0.72
0.0.73
0.0.74
0.0.75
0.0.76
0.0.77
0.0.78
0.0.79
0.0.80
0.0.81
0.0.82
0.0.83
0.0.84rc1
0.0.84rc2
0.0.84rc3
0.0.84rc4
0.0.84rc5
0.0.84
0.0.85
0.0.86rc1
0.0.86
0.0.87
0.0.88
0.0.89
0.0.90
0.0.91
0.0.92
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.1.10
0.1.11
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
0.1.22
0.1.23
0.1.24
0.1.25
0.1.26
0.1.27
0.1.28
0.1.29
0.1.30
0.1.31
0.1.32rc1
0.1.32rc2
0.1.32rc3
0.1.32rc4
0.1.32rc5
0.1.32rc6
0.1.32rc7
0.1.32rc8
0.1.33
0.1.34
0.1.35
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.41
0.1.42
0.1.43
0.1.44
0.1.45rc1
0.1.45
0.1.46rc1
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.51
0.1.52
0.1.53
0.1.54
0.1.55
0.1.56
0.1.57
0.1.58
0.1.59
0.1.60
0.1.61
0.1.62
0.1.63
0.1.64
0.1.65
0.1.66
0.1.67
0.1.68
0.1.69
0.1.70
0.1.71
0.1.72
0.1.73
0.1.74
0.1.75
0.1.76
0.1.77
0.1.78
0.1.79
0.1.80
0.1.81
0.1.82
0.1.83
0.1.84
0.1.85
0.1.86
0.1.87
0.1.88
0.1.89
0.1.90
0.1.91
0.1.92
0.1.93
0.1.94
0.1.95
0.1.96
0.1.97
0.1.98
0.1.99rc1
0.1.99
0.1.100
0.1.101
0.1.102
0.1.103
0.1.104
0.1.105
0.1.106
0.1.107
0.1.108rc0
0.1.108
0.1.109
0.1.110
0.1.111
0.1.112
0.1.113
0.1.114
0.1.115rc0
0.1.115rc1
0.1.115
0.1.116rc1
0.1.116
0.1.117
0.1.118
0.1.119
0.1.120
0.1.121
0.1.122
0.1.123
0.1.124
0.1.125
0.1.126
0.1.127
0.1.128
0.1.129
0.1.130
0.1.131
0.1.132
0.1.133
0.1.134
0.1.135
0.1.136
0.1.137
0.1.138rc1
0.1.138rc2
0.1.138
0.1.139rc1
0.1.139rc2
0.1.139
0.1.140
0.1.141
0.1.142
0.1.143
0.1.144rc1
0.1.144rc2
0.1.144rc3
0.1.144
0.1.145
0.1.146
0.1.147
0.1.148rc1
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.6
0.2.7
0.2.8
0.2.9
0.2.10
0.2.11rc1
0.2.11rc2
0.2.11rc3
0.2.11rc4
0.2.11rc5
0.2.11rc6
0.2.11rc7
0.2.11rc8
0.2.11rc9
0.2.11rc10
0.2.11rc11
0.2.11rc12
0.2.11rc13
0.2.11rc14
0.2.11rc15
0.2.11
0.3.0
0.3.1rc1
0.3.1
0.3.2
0.3.3rc0
0.3.3
0.3.4
0.3.5
0.3.6
0.3.7
0.3.8
0.3.9
0.3.10
0.3.11rc1
0.3.11
0.3.12
0.3.13
0.3.14rc0
0.3.14rc1
0.3.14
0.3.15
0.3.16
0.3.17
0.3.18rc1
0.3.18
0.3.19
0.3.20
0.3.21
0.3.22
0.3.23
0.3.24
0.3.25rc1
0.3.25rc2
0.3.25
0.3.26
0.3.27rc1
0.3.27
0.3.28rc1
0.3.28rc2
0.3.28
0.3.29rc0
0.3.29
0.3.30
0.3.31
0.3.32
0.3.33
0.3.34
0.3.35
0.3.36
0.3.37rc0
0.3.37
0.3.38
0.3.39
0.3.40
0.3.41
0.3.42
0.3.43
0.3.44
0.3.45
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
0.4.7
0.4.8
0.4.9
0.4.10
0.4.11
0.4.12
0.4.13
0.4.14
0.4.15
0.4.16
0.4.17
0.4.18
0.4.19
0.4.20
0.4.21
0.4.22
0.4.23
0.4.24
0.4.25
0.4.26
0.4.27
0.4.28
0.4.29
0.4.30
0.4.31
0.4.32rc0
0.4.32
0.4.33
0.4.34
0.4.35rc1
0.4.35
0.4.36
0.4.37
0.4.38
0.4.39rc0
0.4.39rc1
0.4.39
0.4.40
0.4.41
0.4.42rc0
0.4.42
0.4.43rc0
0.4.43
0.4.44
0.4.45
0.4.46
0.4.47
0.4.48
0.4.49
0.4.50
0.4.51
0.4.52
0.4.53
0.4.54rc0
0.4.54
0.4.55
0.4.56
0.4.57
0.4.58
0.4.59
0.4.60
0.5.0
0.5.1
0.5.2
0.6.0rc0
0.6.0
0.6.1
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.6.7
0.6.8
0.6.9
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.7.9
0.7.10
0.7.11
0.7.12
0.7.13
0.7.14
0.7.15
0.7.16
0.7.17
0.7.18
0.7.19
0.7.20
0.7.21
0.7.22
0.7.23
0.7.24
0.7.25
0.7.26
0.7.27
0.7.28
0.7.29
0.7.30

Database specific

last_known_affected_version_range 
"<= 0.7.30"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-rr7j-v2q5-chgv/GHSA-rr7j-v2q5-chgv.json"