Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

langchain-core

pypi

Building applications with LLMs through composability

View on github.com · View on pypi.org

Security Advisories for langchain-core in pypi

High
6 months ago

LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists GSA_kwCzR0hTQS1wand4LXIzN3YtNzcyNM4ABWgs

pypi langchain-core
Moderate
7 months ago

LangChain has incomplete f-string validation in prompt templates GSA_kwCzR0hTQS05MjZ4LTNyNXgtZ2Zod84ABU-D

pypi langchain-core
High
7 months ago

LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions GSA_kwCzR0hTQS1xaDZoLXA2YzktZmY1NM4ABUZc

pypi langchain-core
Low
9 months ago

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages GSA_kwCzR0hTQS0yZzZyLWMyNzItdzU4cs4ABSNk

pypi langchain-core
Critical
11 months ago

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs GSA_kwCzR0hTQS1jNjdqLXc2ZzYtcTJjbc4ABQFk

pypi langchain-core
High
12 months ago

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates GSA_kwCzR0hTQS02cXY5LTQ4eGctZmM3Zs4ABOtS

pypi langchain-core
Potential
High
about 1 year ago

LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing GSA_kwCzR0hTQS1tNDJtLW04Y3ItOG01OM4ABNAK

pypi langchain-text-splitters
Potential
High
over 1 year ago

LangChain Community SSRF vulnerability exists in RequestsToolkit component GSA_kwCzR0hTQS1oNWdjLXJtOGotNWdwcs4ABJX0

pypi langchain-community
Moderate
over 1 year ago

langchain-core allows unauthorized users to read arbitrary files from the host file system GSA_kwCzR0hTQS01Y2hyLWZqanYtMzhxds4ABFry

pypi langchain-core
Likely fork
Low
about 2 years ago

Langchain SQL Injection vulnerability GSA_kwCzR0hTQS00NXBnLTM2cDYtODN2Oc4ABAya

pypi langchain-community, langchain
Potential
Critical
about 2 years ago

LangChain Experimental Eval Injection vulnerability GSA_kwCzR0hTQS1wMnFqLXI1M2otaDN4as4AA_sB

pypi langchain-experimental
Potential
Critical
over 2 years ago

langchain-experimental vulnerable to Arbitrary Code Execution GSA_kwCzR0hTQS1jZ2NnLXA2OHEtM3c3ds4AA94z

pypi langchain-experimental
Potential
High
over 2 years ago

langchain_experimental Code Execution via Python REPL access GSA_kwCzR0hTQS13bXZtLTl2cXYtNXFwcM4AA9HZ

pypi langchain-experimental
Likely fork
Moderate
over 2 years ago

Denial of service in langchain-community GSA_kwCzR0hTQS0zaGpoLWpoMmgtdnJnNs4AA8xc

pypi langchain, langchain-community
Likely fork
Moderate
over 2 years ago

langchain vulnerable to path traversal GSA_kwCzR0hTQS1yZ3A4LXBtMjgtMzc1Oc4AA7CB

pypi langchain
Moderate
over 2 years ago

LangChain's XMLOutputParser vulnerable to XML Entity Expansion GSA_kwCzR0hTQS1xODRtLXJtdzMtNDM4Ms4AA6Si

pypi langchain-core
Low
over 2 years ago

LangChain directory traversal vulnerability GSA_kwCzR0hTQS1oNTl4LXA3MzktOTgyY84AA5ue

pypi langchain-core, langchain
Potential
Critical
over 2 years ago

LangChain Experimental vulnerable to arbitrary code execution GSA_kwCzR0hTQS12OHZqLWN2MjctaGp2OM4AA5gM

pypi langchain-experimental
Likely fork
Low
over 2 years ago

langchain Server-Side Request Forgery vulnerability GSA_kwCzR0hTQS1oOWo3LTV4dmMtcWhnNc4AA5fj

pypi langchain
Likely fork
Critical
about 3 years ago

Langchain SQL Injection vulnerability GSA_kwCzR0hTQS04aDV3LWY2cTktd2czNc4AA2mm

pypi langchain
Likely fork
High
about 3 years ago

Langchain Server-Side Request Forgery vulnerability GSA_kwCzR0hTQS02aDhwLTRoeDktdzY2Y84AA2mq

pypi langchain
Likely fork
High
about 3 years ago

LangChain Server Side Request Forgery vulnerability GSA_kwCzR0hTQS02NTV3LWZtOG0tbTQ3OM4AA2ja

pypi langchain
Potential
Critical
about 3 years ago

langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method GSA_kwCzR0hTQS1nampyLTYzeDQtdjhjcc4AA2Tu

pypi langchain-experimental
Likely fork
Critical
about 3 years ago

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library GSA_kwCzR0hTQS1mNzN3LTRtN2ctY2g5eM4AA1n1

pypi numexpr, langchain
Likely fork
Critical
about 3 years ago

LangChain vulnerable to arbitrary code execution GSA_kwCzR0hTQS1wcmdwLXc3dmYtY2g2Ms4AA1T_

pypi langchain
Likely fork
Critical
over 3 years ago

langchain Code Injection vulnerability GSA_kwCzR0hTQS1nd3FxLTZ2cTctNWo4Ns4AA1D8

pypi langchain
Likely fork
Critical
over 3 years ago

langchain vulnerable to arbitrary code execution GSA_kwCzR0hTQS01N2ZjLThxODItZ2ZwM84AA0QS

pypi langchain
Likely fork
Critical
over 3 years ago

langchain arbitrary code execution vulnerability GSA_kwCzR0hTQS0ycW1qLTc5NjItY2pxOM4AA0Lt

pypi langchain
Likely fork
Critical
over 3 years ago

Langchain vulnerable to arbitrary code execution GSA_kwCzR0hTQS02NjQzLWg3aDUteDl3aM4AAz9W

pypi langchain
Likely fork
Critical
over 3 years ago

Langchain OS Command Injection vulnerability GSA_kwCzR0hTQS14MzJjLTU5djUtaDdmZ84AAz28

pypi langchain

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Critical 13 High 8 Moderate 5 Low 4