LOW 3.7 PyPI
GHSA-h9j7-5xvc-qhg5 · CVE-2024-0243, PYSEC-2024-235 langchain Server-Side Request Forgery vulnerability
Modified: 2/26/2025
package
PyPI / langchain
pkg:pypi/langchain
CRITICAL 9.8 PyPI
GHSA-prgp-w7vf-ch62 · CVE-2023-39659, PYSEC-2023-147 LangChain vulnerable to arbitrary code execution
Modified: 9/27/2024
MEDIUM 6.5 PyPI
GHSA-rgp8-pm28-3759 · CVE-2024-3571 langchain vulnerable to path traversal
Modified: 4/16/2024
CRITICAL 9.8 PyPI
GHSA-x32c-59v5-h7fg · CVE-2023-34540, PYSEC-2023-91 Langchain OS Command Injection vulnerability
Modified: 2/21/2025
CRITICAL 9.8 PyPI
GHSA-2qmj-7962-cjq8 · CVE-2023-36258, PYSEC-2023-98 langchain arbitrary code execution vulnerability
Modified: 11/22/2024
HIGH 7.1 PyPI npm
GHSA-3644-q5cj-c5c7 · CVE-2026-45134 LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
Modified: 6/9/2026
MEDIUM 4.2 PyPI
GHSA-3hjh-jh2h-vrg6 · CVE-2024-2965, PYSEC-2024-118 Denial of service in langchain-community
Modified: 11/4/2024
MEDIUM 4.9 PyPI
GHSA-45pg-36p6-83v9 · CVE-2024-8309, PYSEC-2024-115 Langchain SQL Injection vulnerability
Modified: 11/12/2024
CRITICAL 9.8 PyPI
GHSA-57fc-8q82-gfp3 · CVE-2023-36188, PYSEC-2023-109 langchain vulnerable to arbitrary code execution
Modified: 2/16/2025
HIGH 8.8 PyPI
GHSA-655w-fm8m-m478 · CVE-2023-46229, PYSEC-2023-205 LangChain Server Side Request Forgery vulnerability
Modified: 9/30/2024
CRITICAL 9.8 PyPI
GHSA-6643-h7h5-x9wh · CVE-2023-34541, PYSEC-2023-92 Langchain vulnerable to arbitrary code execution
Modified: 12/7/2024
HIGH 7.5 PyPI
GHSA-6h8p-4hx9-w66c · CVE-2023-32786 Langchain Server-Side Request Forgery vulnerability
Modified: 2/16/2024
CRITICAL 9.8 PyPI
GHSA-7gfq-f96f-g85j · CVE-2023-36281, PYSEC-2023-151 langchain vulnerable to arbitrary code execution
Modified: 9/30/2024
HIGH 7.5 PyPI
GHSA-7q94-qpjr-xpgm · CVE-2023-36189, PYSEC-2023-110 langchain SQL Injection vulnerability
Modified: 10/21/2024
CRITICAL 9.8 PyPI
GHSA-8h5w-f6q9-wg35 · CVE-2023-32785 Langchain SQL Injection vulnerability
Modified: 11/7/2024
CRITICAL 9.8 PyPI
GHSA-92j5-3459-qgp4 · CVE-2023-38896, PYSEC-2023-146 LangChain vulnerable to arbitrary code execution
Modified: 9/27/2024
CRITICAL 9.8 PyPI
GHSA-f73w-4m7g-ch9x · CVE-2023-39631, PYSEC-2023-162 Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
Modified: 2/20/2025
CRITICAL 9.8 PyPI
GHSA-fj32-q626-pjjc · CVE-2023-38860, PYSEC-2023-145 LangChain vulnerable to arbitrary code execution
Modified: 9/27/2024
CRITICAL 9.8 PyPI
GHSA-fprp-p869-w6q2 · CVE-2023-29374, PYSEC-2023-18 LangChain vulnerable to code injection
Modified: 2/12/2025
CRITICAL 9.8 PyPI
GHSA-gwqq-6vq7-5j86 · CVE-2023-36095, PYSEC-2023-138 langchain Code Injection vulnerability
Modified: 9/27/2024
LOW PyPI
GHSA-h59x-p739-982c · CVE-2024-28088, PYSEC-2024-43 LangChain directory traversal vulnerability
Modified: 12/3/2024
— PyPI
PYSEC-2023-109 · CVE-2023-36188, GHSA-57fc-8q82-gfp3 Modified: 6/10/2026
— PyPI
PYSEC-2023-110 · CVE-2023-36189, GHSA-7q94-qpjr-xpgm Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-138 · CVE-2023-36095, GHSA-gwqq-6vq7-5j86 Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-145 · CVE-2023-38860, GHSA-fj32-q626-pjjc Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-146 · CVE-2023-38896, GHSA-92j5-3459-qgp4 Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-147 · CVE-2023-39659, GHSA-prgp-w7vf-ch62 Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-151 · CVE-2023-36281, GHSA-7gfq-f96f-g85j Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2023-162 · CVE-2023-39631, GHSA-f73w-4m7g-ch9x Modified: 11/8/2023
— PyPI
PYSEC-2023-18 · CVE-2023-29374, GHSA-fprp-p869-w6q2 Modified: 6/10/2026
— PyPI
PYSEC-2023-205 · CVE-2023-46229, GHSA-655w-fm8m-m478 Modified: 6/10/2026
— PyPI
PYSEC-2023-91 · CVE-2023-34540, GHSA-x32c-59v5-h7fg Modified: 6/10/2026
— PyPI
PYSEC-2023-92 · CVE-2023-34541, GHSA-6643-h7h5-x9wh Modified: 6/10/2026
— PyPI
PYSEC-2023-98 · CVE-2023-36258, GHSA-2qmj-7962-cjq8 Modified: 6/10/2026
CRITICAL 9.8 PyPI
PYSEC-2024-115 · CVE-2024-8309, GHSA-45pg-36p6-83v9 Modified: 6/10/2026
MEDIUM 4.7 PyPI
PYSEC-2024-118 · CVE-2024-2965, GHSA-3hjh-jh2h-vrg6 Modified: 6/10/2026
— PyPI
PYSEC-2024-43 · CVE-2024-28088, GHSA-h59x-p739-982c Modified: 3/13/2024