langchain vulnerabilities
CVEs whose affected-version data names the langchain package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
9 CVEsRSS
CVE-2026-55443Medium· 5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
▾ Sunlitlangchain · langchainEPSS 0.21%via OSV
GHSA-gr75-jv2w-4656Medium· 5.1LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
▾ Sunlitlangchain · langchainvia GHSA
CVE-2026-45134High· 7.1LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
▾ Twilightlangsmith · langsmithEPSS 0.20%via OSV
CVE-2024-8309Medium· 4.9PoCLangchain SQL Injection vulnerability
Langchain SQL Injection vulnerability
▾ Twilightlangchain-community · langchain-communityEPSS 14%via OSV
CVE-2024-2965Medium· 4.2Denial of service in langchain-community
Denial of service in langchain-community
▾ Sunlitlangchain-community · langchain-communityEPSS 0.30%via OSV
CVE-2024-3571Medium· 6.5langchain vulnerable to path traversal
langchain vulnerable to path traversal
▾ Sunlitlangchain · langchainEPSS 1.9%via OSV
CVE-2024-0243Low· 3.7langchain Server-Side Request Forgery vulnerability
langchain Server-Side Request Forgery vulnerability
▾ Sunlitlangchain · langchainEPSS 0.52%via OSV
CVE-2023-32786High· 7.5Langchain Server-Side Request Forgery vulnerability
Langchain Server-Side Request Forgery vulnerability
▾ Twilightlangchain · langchainEPSS 0.70%via OSV
CVE-2023-36188Critical· 9.8langchain vulnerable to arbitrary code execution
langchain vulnerable to arbitrary code execution
▾ Midnightlangchain · langchainEPSS 1.9%via OSV