langchain-community vulnerabilities (PyPI)

7 vulnerabilities.

• langchain-community PyPI Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain CVE-2025-6984 Fix available 7.5 HighSeptember 4, 2025
• langchain-community PyPI SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain CVE-2025-2828 Fix available EPSS 21.0% 8.4 HighJune 23, 2025
• langchain-community PyPI SQL Injection in langchain-ai/langchain CVE-2024-8309 Public exploitFix available EPSS 13.7% 4.9 MediumOctober 29, 2024
• langchain-community PyPI Deserialization of Untrusted Data in langchain-ai/langchain CVE-2024-5998 Fix available 5.2 MediumSeptember 17, 2024
• langchain-community PyPI Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain CVE-2024-2965 Fix available 4.2 MediumJune 6, 2024
• langchain-community PyPI SSRF in Langchain Web Research Retriever in langchain-ai/langchain CVE-2024-3095 Fix available 4.8 MediumJune 6, 2024
• langchain-community PyPI LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery CVE-2024-2057 6.3 MediumMarch 1, 2024