langchain
Building applications with LLMs through composability
Security Advisories for langchain in pypi
Moderate
5 months ago
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
pypi
langchain-anthropic, langchain
High
6 months ago
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
pypi, npm
langchain, langchain-classic, langsmith
Potential
Moderate
over 1 year ago
langchain-core allows unauthorized users to read arbitrary files from the host file system
pypi
langchain-core
Potential
High
over 2 years ago
langchain_experimental Code Execution via Python REPL access
pypi
langchain-experimental
Moderate
over 2 years ago
Denial of service in langchain-community
pypi
langchain, langchain-community
Potential
Moderate
over 2 years ago
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
pypi
langchain-core
Critical
about 3 years ago
Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
pypi
numexpr, langchain