Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langchain-community

7 known vulnerabilities (2 high, 5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 2 high, 5 medium
Registry
PyPI

Advisories 7

  • Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

    Affected: fixed in 0.3.27.

  • SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    Affected: fixed in 0.0.28; fixed in 0.0.28.

  • CVE-2024-8309Medium 4.9

    SQL Injection in langchain-ai/langchain

    Affected: from 0.2.0, fixed in 0.2.19.

  • CVE-2024-5998Medium 5.2

    Deserialization of Untrusted Data in langchain-ai/langchain

    Affected: fixed in 0.2.4.

  • CVE-2024-2965Medium 4.2

    Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain

    Affected: fixed in 0.2.5.

  • CVE-2024-3095Medium 4.8

    SSRF in Langchain Web Research Retriever in langchain-ai/langchain

    Affected: fixed in 0.2.9.

  • CVE-2024-2057Medium 6.3

    LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

    Affected: through 0.0.26.