| CVE-2025-8709 |
A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite…
|
7.3
Élevée
|
26 oct. 2025 |
| CVE-2025-6985 |
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE)…
|
7.5
Élevée
|
6 oct. 2025 |
| CVE-2025-6984 |
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity…
|
7.5
Élevée
|
4 sept. 2025 |
| CVE-2025-2828 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community…
|
8.4
Élevée
|
23 juin 2025 |
| CVE-2024-10940 |
A vulnerability in langchain-core versions…
|
5.3
Moyenne
|
20 mars 2025 |
| CVE-2024-8309 |
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through…
|
4.9
Moyenne
|
29 oct. 2024 |
| CVE-2024-5998 |
A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization…
|
5.2
Moyenne
|
17 sept. 2024 |
| CVE-2024-2965 |
A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain`…
|
4.2
Moyenne
|
6 juin 2024 |
| CVE-2024-3095 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of…
|
4.8
Moyenne
|
6 juin 2024 |
| CVE-2024-3571 |
langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted…
|
6.5
Moyenne
|
16 avr. 2024 |
| CVE-2024-1455 |
A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External…
|
5.9
Moyenne
|
26 mars 2024 |
| CVE-2024-0243 |
With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com"…
|
3.7
Faible
|
24 févr. 2024 |