langchain-core vulnerabilities (PyPI)
9 vulnerabilities.
-
langchain-corePyPI LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists 8.2 High -
langchain-corePyPI LangChain has incomplete f-string validation in prompt templates 5.3 Medium -
langchain-corePyPI LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions 7.5 High -
langchain-corePyPI LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages 3.7 Low -
langchain-corePyPI LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs 9.3 Critical -
langchain-corePyPI LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates 8.3 High -
langchain-corePyPI Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain 5.3 Medium -
langchain-corePyPI Billion Laughs Attack leading to DoS in langchain-ai/langchain 5.9 Medium -
langchain-corePyPI LangChain directory traversal vulnerability 8.1 High