github/langchain
1
0
Fork 0
mirror of https://github.com/hwchase17/langchain.git synced 2026-06-09 10:17:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(core, langchain): harden load() against untrusted manifests (#37197)

Browse Source
This commit is contained in:
Nick Hollon
2026-05-05 14:36:58 -04:00
committed by GitHub
parent d7031101da
commit c979c6187b
8 changed files with 550 additions and 98 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libs/core/langchain_core/tracers/log_stream.py
View File

@@ -585,7 +585,7 @@ def _get_standardized_inputs(
)
raise NotImplementedError(msg)
inputs = load(run.inputs, allowed_objects="all")
inputs = load(run.inputs, allowed_objects="messages")
if run.run_type in {"retriever", "llm", "chat_model"}:
return inputs
@@ -617,7 +617,7 @@ def _get_standardized_outputs(
Returns:
An output if returned, otherwise `None`.
"""
outputs = load(run.outputs, allowed_objects="all")
outputs = load(run.outputs, allowed_objects="messages")
if schema_format == "original":
if run.run_type == "prompt" and "output" in outputs:
# These were previously dumped before the tracer.