Advisoriesby Ibis
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsLangGraphCVE-2026-118667fixed in 1.2.14LangGraph Python SDK is used to connect to running LangGraph API serversLangGraphCVE-2026-48776fixed in 0.3.15LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersLangChainCVE-2026-55443fixed in 1.3.9LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warningLangChainCVE-2026-45134fixed in 0.3.30LangChain: unsafe deserializationLangChainCVE-2026-44843fixed in 0.3.85 +1LangChain has incomplete f-string validation in prompt templatesLangChainCVE-2026-40087fixed in 0.3.84 +1LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsLangChainCVE-2026-34070fixed in 1.2.22LangGraph checkpoint loading has unsafe msgpack deserializationLangGraphCVE-2026-28277fixed in 1.0.10LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoaderLangChainCVE-2026-27795fixed in 1.1.18@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationLangChainCVE-2026-26019fixed in 1.1.14LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesLangChainCVE-2026-26013fixed in 1.2.11LangChain serialization injection vulnerability enables secret extractionLangChainCVE-2025-68665fixed in 0.3.37 +3LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIsLangChainCVE-2025-68664fixed in 0.3.81 +1LangChain Vulnerable to Template Injection via Attribute Access in Prompt TemplatesLangChainCVE-2025-65106fixed in 0.3.80 +1Langchain Community Vulnerable to XML External Entity (XXE) AttacksLangChainCVE-2025-6984fixed in 0.3.27LangChain Community SSRF vulnerability exists in RequestsToolkit componentLangChainCVE-2025-2828fixed in 0.0.28langchain-core allows unauthorized users to read arbitrary files from the host file systemLangChainCVE-2024-10940fixed in 0.1.53 +2Langchain SQL Injection vulnerabilityLangChainCVE-2024-8309fixed in 0.2.0 +1@langchain/community SQL Injection vulnerabilityLangChainCVE-2024-7042fixed in 0.3.3Langchain Path Traversal vulnerabilityLangChainCVE-2024-7774fixed in 0.2.19LangChain Experimental Eval Injection vulnerabilityLangChainCVE-2024-46946no fix yetLangChain pickle deserialization of untrusted dataLangChainCVE-2024-5998fixed in 0.2.4langchain-experimental vulnerable to Arbitrary Code ExecutionLangChainCVE-2024-21513fixed in 0.0.21langchain_experimental Code Execution via Python REPL accessLangChainCVE-2024-38459fixed in 0.0.61Denial of service in langchain-communityLangChainCVE-2024-2965fixed in 0.2.5Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetrieverLangChainCVE-2024-3095fixed in 0.2.9langchain vulnerable to path traversalLangChainCVE-2024-3571fixed in 0.0.353LangChain's XMLOutputParser vulnerable to XML Entity ExpansionLangChainCVE-2024-1455fixed in 0.1.35LangChain directory traversal vulnerabilityLangChainCVE-2024-28088fixed in 0.0.339 +1LangChain: server-side request forgeryLangChainCVE-2024-2057no fix yetLangChain Experimental vulnerable to arbitrary code executionLangChainCVE-2024-27444fixed in 0.0.52langchain Server-Side Request Forgery vulnerabilityLangChainCVE-2024-0243fixed in 0.1.0Langchain Server-Side Request Forgery vulnerabilityLangChainCVE-2023-32786fixed in 0.0.329Langchain SQL Injection vulnerabilityLangChainCVE-2023-32785fixed in 0.0.247LangChain Server Side Request Forgery vulnerabilityLangChainCVE-2023-46229fixed in 0.0.317langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec methodLangChainCVE-2023-44467no fix yetLangchain vulnerable to arbitrary code execution via the evaluate function in the numexpr libraryLangChainCVE-2023-39631fixed in 0.0.308langchain vulnerable to arbitrary code executionLangChainCVE-2023-36281fixed in 0.0.312LangChain vulnerable to arbitrary code executionLangChainCVE-2023-38896fixed in 0.0.236LangChain vulnerable to arbitrary code executionLangChainCVE-2023-38860fixed in 0.0.247LangChain vulnerable to arbitrary code executionLangChainCVE-2023-39659fixed in 0.0.325langchain Code Injection vulnerabilityLangChainCVE-2023-36095fixed in 0.0.236langchain vulnerable to arbitrary code executionLangChainCVE-2023-36188fixed in 0.0.247langchain SQL Injection vulnerabilityLangChainCVE-2023-36189fixed in 0.0.247langchain arbitrary code execution vulnerabilityLangChainCVE-2023-36258fixed in 0.0.247Langchain vulnerable to arbitrary code executionLangChainCVE-2023-34541fixed in 0.0.247Langchain OS Command Injection vulnerabilityLangChainCVE-2023-34540fixed in 0.0.225LangChain vulnerable to code injectionLangChainCVE-2023-29374no fix yet