erroneo.us
Search all guides⌘K

Digest · Tuesday

Security digest: December 23, 2025

1 editorial brief and 2 critical advisories.

All digests · RSS · Markdown

Take stock

  • Patch this week: LangGrinch. Teams running LangChain apps that stream events with astream_events v1 or astream_log, persist message history, or load serialized objects that can contain LLM output or user data.
  • PyPI: 2 critical advisories (smolagents, langchain-core). Check with pip-audit (or: pip show <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Patch this week

· Vulnerability · CVE-2025-68664, CVE-2025-68665

LangGrinch: LangChain Core Serialization Injection

A real design flaw in a library almost every Python agent stack pulls in, but it needs a serialize-then-deserialize path over attacker-influenced data; bump langchain-core in your next routine dependency update.

Must act: Teams running LangChain apps that stream events with astream_events v1 or astream_log, persist message history, or load serialized objects that can contain LLM output or user data.

Can relax: Projects that never call LangChain's load()/loads() on data that could contain model output or user input, or that already run langchain-core 1.2.5+ or 0.3.81+.

  1. Upgrade Python langchain-core to 1.2.5 (1.x) or 0.3.81 (0.3.x): pip install -U 'langchain-core>=1.2.5'
  2. Upgrade JS @langchain/core to 1.1.8 or 0.3.80 and langchain to 1.2.3 or 0.3.37
  3. Move streaming code from astream_events(version="v1") to version="v2"

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 2

GitHub-reviewed advisories rated critical, published this day (Pacific time).

PyPI 2

Check: pip-audit (or: pip show <package>)