Loading the catalogue…
Loading the catalogue…
“The dominant open-source agent framework for Sovereign inference orchestration, but six CVEs in 90 days — one still unresolved — demand active security discipline.”
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
None catalogued.
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
lowUpstream change on langchain: github_last_push '2026-06-23T04:34:02Z' → '2026-06-29T19:47:27Z'
other · open
Source ↗lowUpstream change on langchain: github_release 'langchain-core==1.4.7' → 'langchain-core==1.4.8', github_last_push '2026-06-16T00:12:47Z' → '2026-06-23T04:34:02Z'
other · open
Source ↗lowUpstream change on langchain: github_release 'langchain-core==1.4.2' → 'langchain-core==1.4.7', github_last_push '2026-06-08T18:19:52Z' → '2026-06-16T00:12:47Z', cve_count 8 → 9
other · open
Source ↗lowUpstream change on langchain: github_release 'langchain-core==1.4.0' → 'langchain-core==1.4.2', github_last_push '2026-06-02T00:04:01Z' → '2026-06-08T18:19:52Z'
other · open
Source ↗lowUpstream change on langchain: github_last_push '2026-05-19T03:23:28Z' → '2026-06-02T00:04:01Z'
other · open
lowUpstream change on langchain: github_last_push '2026-05-11T21:48:56Z' → '2026-05-19T03:23:28Z'
other · open
Source ↗lowUpstream change on langchain: github_release 'langchain-core==1.4.0a2' → 'langchain-core==1.4.0', github_last_push '2026-05-04T10:14:29Z' → '2026-05-11T21:48:56Z', cve_count 7 → 8
other · open
Source ↗lowUpstream change on langchain: github_release None → 'langchain-core==1.4.0a2', github_last_push None → '2026-05-04T10:14:29Z', cve_count None → 7
other · open
Source ↗How LangChain moves data between the client, the inference endpoint and any vendor-owned services.
OpenAI-compatible. Point LangChain at Stav, set the header, you're done.
# LangChain on Stav AI # OpenAI-compatible — drop the base URL in, swap your key, ship. OPENAI_API_KEY=$STAV_API_KEY OPENAI_BASE_URL=https://api.stav.ai/v1 # Header — Stav attributes usage to your registered app and respects # per-app routing policy. Send when the app supports custom headers. X-Stav-App-Id: langchain
Setup notes · Read about sovereign routing →
What a model must support to work well with LangChain. Match these against the Stav model catalogue to pick an endpoint.
Live usage rolls up every five minutes. We surface the model mix once enough requests have flowed through this app.
Live usage rolls up every five minutes. We surface the 12-week trend once enough requests have flowed through this app.