[Snyk] Security upgrade @langchain/core from 0.3.27 to 0.3.80

[SMSDAO]

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Deserialization of Untrusted Data SNYK-JS-LANGCHAINCORE-14563113	853

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Deserialization of Untrusted Data

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​solutiofi/​sdk@​1.0.2
	@​typescript-eslint/​parser@​8.19.0
	@​metaplex-foundation/​umi-uploader-irys@​1.0.0
	@​metaplex-foundation/​umi-options@​1.0.0
	@​types/​bn.js@​5.1.6
	@​tiplink/​api@​0.3.1
	@​meteora-ag/​alpha-vault@​1.1.7
	@​types/​chai@​5.0.1
	@​modelcontextprotocol/​sdk@​1.5.0
	@​typescript-eslint/​eslint-plugin@​8.19.0
	@​cks-systems/​manifest-sdk@​0.1.59
	@​types/​node@​22.10.7
	@​3land/​listings-sdk@​0.0.7
	@​tensor-oss/​tensorswap-sdk@​4.5.0
	@​ai-sdk/​openai@​1.0.11
	@​sqds/​multisig@​2.1.3
	@​orca-so/​whirlpools-sdk@​0.13.13
	@​metaplex-foundation/​digital-asset-standard-api@​1.0.4
	@​mercurial-finance/​dynamic-amm-sdk@​1.1.23
	@​alloralabs/​allora-sdk@​0.1.0
	@​drift-labs/​vaults-sdk@​0.3.29
	@​pythnetwork/​hermes-client@​1.3.0
	@​switchboard-xyz/​common@​2.5.15
	@​mayanfinance/​swap-sdk@​9.8.0
	@​meteora-ag/​dlmm@​1.3.8
	@​openzeppelin/​contracts@​5.2.0
	@​langchain/​core@​0.3.26 ⏵ 0.3.27	+1		+1
	@​langchain/​langgraph@​0.2.38

View full report

[Copilot]

Pull request overview

This PR upgrades the @langchain/core dependency from version 0.3.27 to 0.3.80 to fix a critical deserialization vulnerability (SNYK-JS-LANGCHAINCORE-14563113) with a severity score of 853/1000. The upgrade addresses a "Deserialization of Untrusted Data" security issue.

Key Changes:

• Upgrade @langchain/core from ^0.3.26 to ^0.3.80 in package.json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.