| CVE-2025-8709 |
A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite…
|
7.3
High
|
Oct 26, 2025 |
| CVE-2025-6985 |
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE)…
|
7.5
High
|
Oct 6, 2025 |
| CVE-2025-6984 |
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity…
|
7.5
High
|
Sep 4, 2025 |
| CVE-2025-2828 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community…
|
8.4
High
|
Jun 23, 2025 |
| CVE-2024-10940 |
A vulnerability in langchain-core versions…
|
5.3
Medium
|
Mar 20, 2025 |
| CVE-2024-8309 |
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through…
|
4.9
Medium
|
Oct 29, 2024 |
| CVE-2024-5998 |
A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization…
|
5.2
Medium
|
Sep 17, 2024 |
| CVE-2024-2965 |
A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain`…
|
4.2
Medium
|
Jun 6, 2024 |
| CVE-2024-3095 |
A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of…
|
4.8
Medium
|
Jun 6, 2024 |
| CVE-2024-3571 |
langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted…
|
6.5
Medium
|
Apr 16, 2024 |
| CVE-2024-1455 |
A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External…
|
5.9
Medium
|
Mar 26, 2024 |
| CVE-2024-0243 |
With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com"…
|
3.7
Low
|
Feb 24, 2024 |