Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langchain-chatchat

6 known vulnerabilities (3 medium, 3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 3 medium, 3 low
Registry
PyPI

Advisories 6

  • chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values

    Affected: through 0.3.1.3.

  • chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou

    Affected: through 0.3.1.3.

  • chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash

    Affected: through 0.3.1.3.

  • CVE-2025-6855Medium 5.1

    chatchat-space Langchain-Chatchat file path traversal

    Affected: through 0.3.1.

  • CVE-2025-6854Medium 5.3

    chatchat-space Langchain-Chatchat files path traversal

    Affected: through 0.3.1.

  • CVE-2025-6853Medium 5.3

    chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

    Affected: through 0.3.1.3.