langchain-ai/langchain vulnerabilities
9 known vulnerabilities in langchain-ai/langchain from LangChain AI. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
langchain-ai/langchain: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter op
- 7.5 High severity
langchain-ai/langchain: Improper Restriction of XML External Entity Reference
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed us
- 7.5 High severity
langchain-ai/langchain: Exposure of Sensitive Information to an Unauthorized Actor
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without di
- 10.0 Critical severity
langchain-ai/langchain: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vuln
- 9.8 Critical severity
langchain-ai/langchain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all
- 7.8 High severity
langchain-ai/langchain: Deserialization of Untrusted Data
A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the os.system function. The issue affects the latest version of
- 7.7 High severity
langchain-ai/langchain: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet addresses, allo
- 8.8 High severity
langchain-ai/langchain: Improper Limitation of a Pathname to a Restricted Directory
langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory ('Path Traversal') in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the
- 8.1 High severity
langchain-ai/langchain: Server-Side Request Forgery
With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text ) docs = loader.load() ``` An attacker in c