Issue Station
Sign In
Tools hereToolbox

langchain - 💡(How to fix) Fix Inconsistent package naming in your security advisories [3 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
langchain-ai/langchain#36082•Fetched 2026-04-08 00:58:14
View on GitHub
Comments
3
Participants
2
Timeline
9
Reactions
0
Author
joshbressersjoshbressers
Participants
joshbressersjoshbressersmdrxymdrxy
Timeline (top)
commented ×3labeled ×2closed ×1issue_type_added ×1

Your security page lists 3 advisories

https://github.com/langchain-ai/langchain/security

Two of them have package details errors

Error Message

Error Message and Stack Trace (if applicable)

Root Cause

Your security page lists 3 advisories

https://github.com/langchain-ai/langchain/security

Two of them have package details errors

Fix Action

Fix / Workaround

  • This is a bug, not a usage question.
  • I added a clear and descriptive title that summarizes this issue.
  • I used the GitHub search to find a similar question and didn't find it.
  • I am sure that this is a bug in LangChain rather than my code.
  • The bug is not resolved by updating to the latest stable version of LangChain (or the specific integration package).
  • This is not related to the langchain-community package.
  • I posted a self-contained, minimal, reproducible example. A maintainer can copy it and run it AS IS.

Code Example

N/A

---
RAW_BUFFERClick to expand / collapse

Checked other resources

  • This is a bug, not a usage question.
  • I added a clear and descriptive title that summarizes this issue.
  • I used the GitHub search to find a similar question and didn't find it.
  • I am sure that this is a bug in LangChain rather than my code.
  • The bug is not resolved by updating to the latest stable version of LangChain (or the specific integration package).
  • This is not related to the langchain-community package.
  • I posted a self-contained, minimal, reproducible example. A maintainer can copy it and run it AS IS.

Package (Required)

  • langchain
  • langchain-openai
  • langchain-anthropic
  • langchain-classic
  • langchain-core
  • langchain-model-profiles
  • langchain-tests
  • langchain-text-splitters
  • langchain-chroma
  • langchain-deepseek
  • langchain-exa
  • langchain-fireworks
  • langchain-groq
  • langchain-huggingface
  • langchain-mistralai
  • langchain-nomic
  • langchain-ollama
  • langchain-openrouter
  • langchain-perplexity
  • langchain-qdrant
  • langchain-xai
  • Other / not sure / general

Related Issues / PRs

No response

Reproduction Steps / Example Code (Python)

N/A

Error Message and Stack Trace (if applicable)

Description

Your security page lists 3 advisories

https://github.com/langchain-ai/langchain/security

Two of them have package details errors

GHSA-2g6r-c272-w58r

https://github.com/langchain-ai/langchain/security/advisories/GHSA-2g6r-c272-w58r

That advisory doesn't list a package name, but included the package name in the version information langchain-core==0.3.81

GHSA-6qv9-48xg-fc7f

https://github.com/langchain-ai/langchain/security/advisories/GHSA-6qv9-48xg-fc7f

The package name listed is langchain_core instead of langchain-core

Thanks in advance

System Info

N/A

extent analysis

Fix Plan

To fix the package details errors in the security advisories, follow these steps:

  • Update the advisory GHSA-2g6r-c272-w58r to include the package name.
  • Update the advisory GHSA-6qv9-48xg-fc7f to use the correct package name langchain-core instead of langchain_core.
  • Example code changes:
# Before
package_name = "langchain_core"

# After
package_name = "langchain-core"
  • Configuration changes: Update the security advisory pages to reflect the correct package names.

Verification

To verify that the fix worked, check the security advisory pages for the correct package names:

  • GHSA-2g6r-c272-w58r should include the package name langchain-core.
  • GHSA-6qv9-48xg-fc7f should use the correct package name langchain-core.

Extra Tips

  • Double-check the package names in all security advisories to ensure consistency.
  • Consider automating the process of updating package names to prevent similar errors in the future.
  • Refer to the LangChain documentation for guidelines on reporting and fixing security advisories.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#api#ssr#installation#tensor shape#autograd error#chain error#conversation history#tool integration

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING