HIGH 7.5 PyPI
GHSA-pc6w-59fv-rh23 · CVE-2025-6984 Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Modified: 2/4/2026
package
PyPI / langchain-community
pkg:pypi/langchain-community
MEDIUM 4.8 PyPI
GHSA-q25c-c977-4cmh · CVE-2024-3095 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Modified: 7/24/2024
MEDIUM 4.2 PyPI
GHSA-3hjh-jh2h-vrg6 · CVE-2024-2965, PYSEC-2024-118 Denial of service in langchain-community
Modified: 11/4/2024
MEDIUM 4.9 PyPI
GHSA-45pg-36p6-83v9 · CVE-2024-8309, PYSEC-2024-115 Langchain SQL Injection vulnerability
Modified: 11/12/2024
MEDIUM 5.2 PyPI
GHSA-f2jm-rw3h-6phg · CVE-2024-5998 LangChain pickle deserialization of untrusted data
Modified: 7/30/2025
HIGH 8.4 PyPI
GHSA-h5gc-rm8j-5gpr · CVE-2025-2828, PYSEC-2025-70 LangChain Community SSRF vulnerability exists in RequestsToolkit component
Modified: 7/17/2025
CRITICAL 9.8 PyPI
PYSEC-2024-115 · CVE-2024-8309, GHSA-45pg-36p6-83v9 Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2024-278 · CVE-2024-2057 Modified: 5/21/2026
CRITICAL 10.0 PyPI
PYSEC-2025-70 · CVE-2025-2828, GHSA-h5gc-rm8j-5gpr Modified: 6/10/2026