Advisoriesby Ibis
LangChain security advisories
45 advisories · 6 critical or high in 12 months · latest Jun 16
45 advisories
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loadersCVE-2026-55443fixed in 1.3.9LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warningCVE-2026-45134fixed in 0.3.30LangChain: unsafe deserializationCVE-2026-44843fixed in 0.3.85 +1LangChain has incomplete f-string validation in prompt templatesCVE-2026-40087fixed in 0.3.84 +1LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functionsCVE-2026-34070fixed in 1.2.22LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoaderCVE-2026-27795fixed in 1.1.18@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationCVE-2026-26019fixed in 1.1.14LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messagesCVE-2026-26013fixed in 1.2.11LangChain serialization injection vulnerability enables secret extractionCVE-2025-68665fixed in 0.3.37 +3LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIsCVE-2025-68664fixed in 0.3.81 +1LangChain Vulnerable to Template Injection via Attribute Access in Prompt TemplatesCVE-2025-65106fixed in 0.3.80 +1Langchain Community Vulnerable to XML External Entity (XXE) AttacksCVE-2025-6984fixed in 0.3.27LangChain Community SSRF vulnerability exists in RequestsToolkit componentCVE-2025-2828fixed in 0.0.28langchain-core allows unauthorized users to read arbitrary files from the host file systemCVE-2024-10940fixed in 0.1.53 +2Langchain SQL Injection vulnerabilityCVE-2024-8309fixed in 0.2.0 +1@langchain/community SQL Injection vulnerabilityCVE-2024-7042fixed in 0.3.3Langchain Path Traversal vulnerabilityCVE-2024-7774fixed in 0.2.19LangChain Experimental Eval Injection vulnerabilityCVE-2024-46946no fix yetLangChain pickle deserialization of untrusted dataCVE-2024-5998fixed in 0.2.4langchain-experimental vulnerable to Arbitrary Code ExecutionCVE-2024-21513fixed in 0.0.21langchain_experimental Code Execution via Python REPL accessCVE-2024-38459fixed in 0.0.61Denial of service in langchain-communityCVE-2024-2965fixed in 0.2.5Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetrieverCVE-2024-3095fixed in 0.2.9langchain vulnerable to path traversalCVE-2024-3571fixed in 0.0.353LangChain's XMLOutputParser vulnerable to XML Entity ExpansionCVE-2024-1455fixed in 0.1.35LangChain directory traversal vulnerabilityCVE-2024-28088fixed in 0.0.339 +1LangChain: server-side request forgeryCVE-2024-2057no fix yetLangChain Experimental vulnerable to arbitrary code executionCVE-2024-27444fixed in 0.0.52langchain Server-Side Request Forgery vulnerabilityCVE-2024-0243fixed in 0.1.0Langchain Server-Side Request Forgery vulnerabilityCVE-2023-32786fixed in 0.0.329Langchain SQL Injection vulnerabilityCVE-2023-32785fixed in 0.0.247LangChain Server Side Request Forgery vulnerabilityCVE-2023-46229fixed in 0.0.317langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec methodCVE-2023-44467no fix yetLangchain vulnerable to arbitrary code execution via the evaluate function in the numexpr libraryCVE-2023-39631fixed in 0.0.308langchain vulnerable to arbitrary code executionCVE-2023-36281fixed in 0.0.312LangChain vulnerable to arbitrary code executionCVE-2023-38896fixed in 0.0.236LangChain vulnerable to arbitrary code executionCVE-2023-38860fixed in 0.0.247LangChain vulnerable to arbitrary code executionCVE-2023-39659fixed in 0.0.325langchain Code Injection vulnerabilityCVE-2023-36095fixed in 0.0.236langchain vulnerable to arbitrary code executionCVE-2023-36188fixed in 0.0.247langchain SQL Injection vulnerabilityCVE-2023-36189fixed in 0.0.247langchain arbitrary code execution vulnerabilityCVE-2023-36258fixed in 0.0.247Langchain vulnerable to arbitrary code executionCVE-2023-34541fixed in 0.0.247Langchain OS Command Injection vulnerabilityCVE-2023-34540fixed in 0.0.225LangChain vulnerable to code injectionCVE-2023-29374no fix yetAbout LangChain
The framework for LLM apps and agents, in Python and JavaScript.
Packages watched: langchain (PyPI), langchain-core (PyPI), langchain-community (PyPI), langchain-experimental (PyPI), langchain (npm), @langchain/core (npm), @langchain/community (npm).
LangChain elsewhere on Ibis: Funding · Paydays · Releases · Repos