Skip to contentLangchain-ai Langchain-ai/langchain vulnerabilities
- langchain-ai langchain-ai/langchainSQL Injection in langchain-ai/langchainCVE-2025-8709Fix available7.3 High
- langchain-ai langchain-ai/langchainXXE Vulnerability in langchain-ai/langchainCVE-2025-6985Fix available7.5 High
- langchain-ai langchain-ai/langchainSensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchainCVE-2025-6984Fix available7.5 High
- langchain, langchain-ai langchain-ai/langchain +1 moreSSRF Vulnerability in RequestsToolkit in langchain-ai/langchainCVE-2025-2828Fix availableEPSS 21.0%8.4 High
- langchain-ai langchain-ai/langchainExposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchainCVE-2024-10940Fix available5.3 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreSQL Injection in langchain-ai/langchainCVE-2024-8309Public exploitFix availableEPSS 13.7%4.9 Medium
- langchain, langchain-ai langchain-ai/langchainjs, langchainjs +2 morePrompt Injection in langchain-ai/langchainjs Leading to SQL InjectionCVE-2024-7042Fix available4.9 Medium
- langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 morePath Traversal in langchain-ai/langchainjsCVE-2024-7774Fix available6.5 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreDeserialization of Untrusted Data in langchain-ai/langchainCVE-2024-5998Fix available5.2 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreDenial-of-Service in LangChain SitemapLoader in langchain-ai/langchainCVE-2024-2965Fix available4.2 Medium
- langchain, langchain-ai langchain-ai/langchain +1 moreSSRF in Langchain Web Research Retriever in langchain-ai/langchainCVE-2024-3095Public exploitFix available4.8 Medium
- langchain, langchain-ai langchain-ai/langchain +1 morePath Traversal in langchain-ai/langchainCVE-2024-3571Fix available6.5 Medium
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreBillion Laughs Attack leading to DoS in langchain-ai/langchainCVE-2024-1455Fix available5.9 Medium
- langchain, langchain-ai langchain-ai/langchain, langchain-ai\/langchain +2 moreServer-side Request Forgery In Recursive URL LoaderCVE-2024-0243Fix available3.7 Low