Product by Langchain-ai
Langchain-ai/langchain
12 known vulnerabilities in Langchain-ai/langchain (Langchain-ai), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-2828 | SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain | 8.4 | |
| Critical | CVE-2024-8309 | SQL Injection in langchain-ai/langchain | 4.9 | |
| High | CVE-2025-6984 | Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain | 7.5 | |
| High | CVE-2024-3571 | Path Traversal in langchain-ai/langchain | 6.5 | |
| High | CVE-2025-6985 | XXE Vulnerability in langchain-ai/langchain | 7.5 | |
| Medium | CVE-2024-1455 | Billion Laughs Attack leading to DoS in langchain-ai/langchain | 5.9 | |
| High | CVE-2024-3095 | SSRF in Langchain Web Research Retriever in langchain-ai/langchain | 4.8 | |
| High | CVE-2025-8709 | SQL Injection in langchain-ai/langchain | 7.3 | |
| Medium | CVE-2024-10940 | Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain | 5.3 | |
| High | CVE-2024-5998 | Deserialization of Untrusted Data in langchain-ai/langchain | 5.2 | |
| High | CVE-2024-0243 | Server-side Request Forgery In Recursive URL Loader | 3.7 | |
| Medium | CVE-2024-2965 | Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain | 4.2 |