releaseintermediate
[Release] langchain-ai/langchain langchain-core==0.3.86: langchain-core==0.3.86
By github-actions[bot]github
View original on githubLangChain Core version 0.3.86 has been released with a critical security fix. This patch backports a path-traversal vulnerability fix (CVE-2026-34070, GHSA-qh6h-p6c9-ff54) to the v0.3 branch. Users should upgrade immediately to address the security issue.
Key Points
- •Security patch released for langchain-core v0.3.86
- •Addresses path-traversal vulnerability (CVE-2026-34070)
- •GitHub Security Advisory GHSA-qh6h-p6c9-ff54 mitigated
- •Backport applied to v0.3 maintenance branch
- •Immediate upgrade recommended for all v0.3 users
- •Prevents unauthorized file system access via path manipulation
Found this useful? Add it to a playbook for a step-by-step implementation guide.
Workflow Diagram
Start Process
Step A
Step B
Step C
Complete