Login Request a demo
LA
Vendor
Langchain
14 products with CVEs on record
52
CVEs
0
On KEV
2
New 30D
Products
MO
mongodb
@langchain
6.0
1 CVEs0 on KEV1 new
RE
redis
@langchain
2.3
1 CVEs0 on KEV1 new
LA
Langchain
Langchain
10.0
28 CVEs0 on KEV0 new
LC
Langchain Core
Langchain
9.1
5 CVEs0 on KEV0 new
LE
Langchain Experimental
Langchain
9.8
5 CVEs0 on KEV0 new
LC
Langchain Community
Langchain
7.4
2 CVEs0 on KEV0 new
LA
Langchain.js
Langchain
9.1
2 CVEs0 on KEV0 new
LA
Langsmith
Langchain
9.8
2 CVEs0 on KEV0 new
LA
Langchain-openai
Langchain
3.1
1 CVEs0 on KEV0 new
LA
Langchain-text-splitters
Langchain
6.5
1 CVEs0 on KEV0 new
LA
Langgraph
Langchain
7.2
1 CVEs0 on KEV0 new
LA
Langgraph-checkpoint
Langchain
6.8
1 CVEs0 on KEV0 new
LA
Langgraph-checkpoint-sqlite
Langchain
7.8
1 CVEs0 on KEV0 new
LA
Langgraph-sdk
Langchain
9.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-106119
MO
mongodb
@langchain
6.0
0%
Oct 6LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
CVE-2026-105799
RE
redis
@langchain
2.3
0%
Oct 6LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
CVE-2026-55443
LA
Langchain
Langchain
5.5
0%
Jun 22LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
CVE-2026-48776
LA
Langgraph-sdk
Langchain
9.1
0%
Jun 16LangGraph SDK has unsafe URL path construction
CVE-2026-48775
LA
Langgraph-checkpoint
Langchain
6.8
0%
Jun 16LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
CVE-2026-44843
LA
Langchain
Langchain
8.2
0%
May 26LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists
CVE-2026-41488
LA
Langchain-openai
Langchain
3.1
0%
Apr 24angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding
CVE-2026-41481
LA
Langchain-text-splitters
Langchain
6.5
0%
Apr 24LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
CVE-2026-40190
LA
Langsmith
Langchain
9.8
0%
Apr 10LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`
CVE-2026-40087
LC
Langchain Core
Langchain
5.3
0%
Apr 9LangChain has incomplete f-string validation in prompt templates
CVE-2026-34070
LC
Langchain Core
Langchain
7.5
1%
Mar 31LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
CVE-2026-28277
LA
Langgraph
Langchain
7.2
5%
Mar 5LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading
CVE-2026-25750
LA
Langsmith
Langchain
8.1
0%
Mar 4LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl
CVE-2026-27795
LC
Langchain Community
Langchain
7.4
0%
Feb 25LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
CVE-2026-26019
LC
Langchain Community
Langchain
4.1
0%
Feb 11@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
CVE-2026-26013
LC
Langchain Core
Langchain
3.7
0%
Feb 10LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
CVE-2024-58340
LA
Langchain
Langchain
7.5
0%
Jan 12LangChain <= 0.3.1 MRKLOutputParser ReDoS
CVE-2025-68665
LA
Langchain.js
Langchain
9.1
1%
Dec 23LangChain serialization injection vulnerability enables secret extraction
CVE-2025-68664
LC
Langchain Core
Langchain
8.2
43%
Dec 23LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
CVE-2025-67644
LA
Langgraph-checkpoint-sqlite
Langchain
7.8
2%
Dec 10LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method
CVE-2025-2828
LA
Langchain
Langchain
10.0
21%
Jun 23A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically,…
CVE-2024-8309
LA
Langchain
Langchain
9.8
14%
Oct 29A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection
CVE-2024-7774
LA
Langchain.js
Langchain
9.1
1%
Oct 29A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5
CVE-2024-7042
LA
Langchain
Langchain
9.8
0%
Oct 29A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection
CVE-2024-46946
LA
Langchain-experimental
Langchain
9.8
1%
Sep 19langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in…
CVE-2024-5998
LA
Langchain
Langchain
7.8
0%
Sep 17A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization of untrusted data
CVE-2024-21513
LA
Langchain-experimental
Langchain
8.5
2%
Jul 15Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will…
CVE-2024-38459
LA
Langchain-experimental
Langchain
7.8
0%
Jun 16langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step
CVE-2024-3095
LA
Langchain
Langchain
7.7
1%
Jun 6A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5
CVE-2024-2965
LA
Langchain
Langchain
4.7
0%
Jun 6A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions
CVE-2024-3571
LA
Langchain
Langchain
8.8
2%
Apr 16langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory ('Path Traversal') in its LocalFileStore functionality
CVE-2024-1455
LA
Langchain
Langchain
5.9
1%
Mar 26A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Entity (XXE) exploitation
CVE-2024-28088
LA
Langchain
Langchain
8.1
2%
Mar 4LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call
CVE-2024-2057
LA
Langchain
Langchain
9.8
1%
Mar 1A vulnerability was found in LangChain langchain_community 0.0.26
CVE-2024-27444
LA
Langchain-experimental
Langchain
9.8
1%
Feb 26langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__,…
CVE-2024-0243
LA
Langchain
Langchain
8.1
1%
Feb 26With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2,…
CVE-2023-32786
LA
Langchain
Langchain
7.5
1%
Oct 20In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting…
CVE-2023-46229
LA
Langchain
Langchain
8.8
48%
Oct 19LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server
CVE-2023-44467
LE
Langchain Experimental
Langchain
9.8
1%
Oct 9langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in…
CVE-2023-39631
LA
Langchain
Langchain
9.8
2%
Sep 1An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library
CVE-2023-36281
LA
Langchain
Langchain
9.8
3%
Aug 22An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt
CVE-2023-39659
LA
Langchain
Langchain
9.8
2%
Aug 15An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component
CVE-2023-38896
LA
Langchain
Langchain
9.8
2%
Aug 15An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions
CVE-2023-38860
LA
Langchain
Langchain
9.8
1%
Aug 15An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter
CVE-2023-36095
LA
Langchain
Langchain
9.8
1%
Aug 5An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt…
CVE-2023-36189
LA
Langchain
Langchain
7.5
1%
Jul 6SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component
CVE-2023-36188
LA
Langchain
Langchain
9.8
2%
Jul 6An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method
CVE-2023-36258
LA
Langchain
Langchain
9.8
1%
Jul 3An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used
CVE-2023-34541
LA
Langchain
Langchain
9.8
1%
Jun 20Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt
CVE-2023-34540
LA
Langchain
Langchain
9.8
2%
Jun 14Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper)
CVE-2023-29374
LA
Langchain
Langchain
9.8
40%
Apr 5In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method