MEDIUM4.2PyPI
GHSA-3hjh-jh2h-vrg6· CVE-2024-2965, PYSEC-2024-118Denial of service in langchain-community
Modified: 7/13/2026
package
PyPI/langchain-community
pkg:pypi/langchain-community
MEDIUM4.9PyPI
GHSA-45pg-36p6-83v9· CVE-2024-8309, PYSEC-2024-115Langchain SQL Injection vulnerability
Modified: 7/7/2026
MEDIUM5.2PyPI
GHSA-f2jm-rw3h-6phg· CVE-2024-5998, PYSEC-2024-323LangChain pickle deserialization of untrusted data
Modified: 7/13/2026
HIGH8.4PyPI
GHSA-h5gc-rm8j-5gpr· CVE-2025-2828, PYSEC-2025-70LangChain Community SSRF vulnerability exists in RequestsToolkit component
Modified: 7/17/2025
HIGH7.5PyPI
GHSA-pc6w-59fv-rh23· CVE-2025-6984, PYSEC-2026-1515Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Modified: 9/10/2026
MEDIUM4.8PyPI
GHSA-q25c-c977-4cmh· CVE-2024-3095, PYSEC-2026-1516Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2024-278· CVE-2024-2057Modified: 5/21/2026
CRITICAL10.0PyPI
PYSEC-2025-70· CVE-2025-2828, GHSA-h5gc-rm8j-5gprModified: 6/10/2026
MEDIUM5.2PyPI
PYSEC-2026-1514· CVE-2024-5998, GHSA-f2jm-rw3h-6phgLangChain pickle deserialization of untrusted data
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-1515· CVE-2025-6984, GHSA-pc6w-59fv-rh23Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Modified: 7/7/2026
MEDIUM4.8PyPI
PYSEC-2026-1516· CVE-2024-3095, GHSA-q25c-c977-4cmhServer-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
Modified: 7/7/2026
MEDIUM4.2PyPI
PYSEC-2026-2561· CVE-2024-2965, GHSA-3hjh-jh2h-vrg6Denial of service in langchain-community
Modified: 7/13/2026