{"id":"CVE-2024-1455","aliases":["GHSA-q84m-rmw3-4382","PYSEC-2026-1519"],"title":"LangChain's XMLOutputParser vulnerable to XML Entity Expansion","summary":"LangChain's XMLOutputParser vulnerable to XML Entity Expansion","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"langchain-core","product":"langchain-core","ecosystem":"pip","affected":["langchain-core < 0.1.35"],"patched":["langchain-core 0.1.35"],"published":"2024-03-26","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-q84m-rmw3-4382","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1455"},{"url":"https://github.com/langchain-ai/langchain/pull/17250"},{"url":"https://github.com/langchain-ai/langchain/pull/19653"},{"url":"https://github.com/langchain-ai/langchain/pull/19660"},{"url":"https://github.com/langchain-ai/langchain/commit/727d5023ce88e18e3074ef620a98137d26ff92a3"},{"url":"https://github.com/langchain-ai/langchain"},{"url":"https://huntr.com/bounties/4353571f-c70d-4bfd-ac08-3a89cecb45b6"}],"tags":["osv","pip"],"epss":0.0077,"epssPercentile":0.54136,"ingestedAt":"2026-07-08T18:25:52.126Z","slug":"CVE-2024-1455","body":"## Overview\n\nThe XMLOutputParser in LangChain uses the etree module from the XML parser in the standard python library which has some XML vulnerabilities; see: https://docs.python.org/3/library/xml.html\n\nThis primarily affects users that combine an LLM (or agent) with the `XMLOutputParser` and expose the component via an endpoint on a web-service. \n\nThis would allow a malicious party to attempt to manipulate the LLM to produce a malicious payload for the parser that would compromise the availability of the service.\n\nA successful attack is predicated on:\n\n1. Usage of XMLOutputParser\n2. Passing of malicious input into the XMLOutputParser either directly or by trying to manipulate an LLM to do so on the users behalf\n3. Exposing the component via a web-service\n\n## Affected packages\n\n- `langchain-core < 0.1.35`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `langchain-core 0.1.35`","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}