Langchain Community vulnerabilities

2 known vulnerabilities in Langchain Community from LangChain. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  langchainjs: Server-Side Request Forgery

  CVE-2026-27795Feb 25, 2026LangChain AI

  LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side Request Forgery (SSRF) bypass exists in `RecursiveUrlLoader` in `@langchain/community`. The loader validates the initial URL but allows the und

• 9.8 Critical severity

  langchain_community: Server-Side Request Forgery

  CVE-2024-2057Mar 1, 2024LangChain

  A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation l