langchain-chatchat vulnerabilities
CVEs whose affected-version data names the langchain-chatchat package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-7846Low· 2.6Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.16%via OSV
CVE-2026-7845Low· 2.6Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.14%via OSV
CVE-2026-7847Low· 2.6Langchain-Chatchat Uses Insufficiently Random Values
Langchain-Chatchat Uses Insufficiently Random Values
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.24%via OSV
CVE-2025-6853Medium· 6.3Langchain-Chatchat has a Path Traversal vulnerability
Langchain-Chatchat has a Path Traversal vulnerability
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.55%via OSV
CVE-2025-6855Medium· 5.5Langchain-Chatchat vulnerable to path traversal
Langchain-Chatchat vulnerable to path traversal
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.62%via OSV
CVE-2025-6854Medium· 4.3Langchain-Chatchat vulnerable to path traversal
Langchain-Chatchat vulnerable to path traversal
▾ Sunlitlangchain-chatchat · langchain-chatchatEPSS 0.54%via OSV