pkg:PyPI/langchain

All known vulnerabilities

• CRITICAL9.8CVE-2024-8309Langchain SQL Injection vulnerability
  from 0, < c2a3021bb0c5f54649d380b42a0684ca5778c255 | from 0, < 0.2.0
• CRITICAL9.8CVE-2023-32785Langchain SQL Injection vulnerability
  from 0, < 0.0.247
• CRITICAL9.8CVE-2023-39631Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
  from 0, < 0.0.308
• CRITICAL9.8Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
  from 0, < 0.0.308
• CRITICAL9.8langchain vulnerable to arbitrary code execution
  from 0, < 0.0.312
• CRITICAL9.8langchain vulnerable to arbitrary code execution
  from 0, < 0.0.171
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.236
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.247
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.325
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.247
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.195
• CRITICAL9.8LangChain vulnerable to arbitrary code execution
  from 0, < 0.0.233
• CRITICAL9.8langchain Code Injection vulnerability
  from 0, < 0.0.236
• CRITICAL9.8langchain Code Injection vulnerability
  from 0, < 0.0.236
• CRITICAL9.8langchain vulnerable to arbitrary code execution
  from 0, < 0.0.247
• CRITICAL9.8langchain arbitrary code execution vulnerability
  from 0, < 0.0.247
• CRITICAL9.8langchain arbitrary code execution vulnerability
  from 0, < 0.0.247
• CRITICAL9.8Langchain vulnerable to arbitrary code execution
  from 0, < 0.0.247
• CRITICAL9.8Langchain vulnerable to arbitrary code execution
  from 0, < 0.0.247
• CRITICAL9.8Langchain OS Command Injection vulnerability
  from 0, < 0.0.225
• CRITICAL9.8Langchain OS Command Injection vulnerability
  from 0, < 0.0.225
• CRITICAL9.8LangChain vulnerable to code injection
  from 0, <= 0.0.131
• CRITICAL9.8LangChain vulnerable to code injection
  from 0, < 0.0.132
• HIGH8.8LangChain Server Side Request Forgery vulnerability
  from 0, < 0.0.317
• HIGH8.8LangChain Server Side Request Forgery vulnerability
  from 0, < 9ecb7240a480720ec9d739b3877a52f76098a2b8 | from 0, < 0.0.317
• HIGH7.5Langchain Server-Side Request Forgery vulnerability
  from 0, < 0.0.329
• HIGH7.5Langchain Server-Side Request Forgery vulnerability
  from 0, < 0.0.329
• HIGH7.5langchain SQL Injection vulnerability
  from 0, < 0.0.247
• HIGH7.5langchain SQL Injection vulnerability
  from 0, < 0.0.247
• HIGH7.1LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  from 0, < 0.3.30
• HIGH7.1LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
  from 0, < 0.3.30
• MEDIUM6.5langchain vulnerable to path traversal
  from 0, < 0.0.353
• MEDIUM6.5langchain vulnerable to path traversal
  from 0, < 0.0.353
• MEDIUM5.2LangChain pickle deserialization of untrusted data
  from 0, < 0.2.9
• MEDIUM5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
  from 0, < 1.3.9
• MEDIUM5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
  from 0, < 1.3.9
• MEDIUM4.2Denial of service in langchain-community
  from 0, < 0.2.5
• MEDIUM4.2Denial of service in langchain-community
  from 0, < 73c42306745b0831aa6fe7fe4eeb70d2c2d87a82 | from 0, < 0.2.5
• LOW3.7langchain Server-Side Request Forgery vulnerability
  from 0, < 0.1.0
• LOW3.7langchain Server-Side Request Forgery vulnerability
  from 0, < 0.1.0
• —LangChain directory traversal vulnerability
  from 0, < 0.0.339
• —LangChain directory traversal vulnerability
  from 0, < 0.1.11