LA
Product
Langchain
28
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 15High 10Medium 3Low 0
Watch
Add Langchain to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1455 | 5.9 | Mar 26 | A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Entity (XXE) exploitation Affected: 0.1.4 through 0.1.35 |
| CVE-2026-55443 | 5.5 | Jun 22 | LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders Affected: before 1.3.9 |
| CVE-2024-2965 | 4.7 | Jun 6 | A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions Affected: before 0.2.5 |
Showing 3