LOW3.7PyPI
GHSA-2g6r-c272-w58r· CVE-2026-26013, PYSEC-2026-2562LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Modified: 9/10/2026
package
PyPI/langchain-core
pkg:pypi/langchain-core
MEDIUM5.3PyPI
GHSA-5chr-fjjv-38qv· CVE-2024-10940, PYSEC-2026-1517langchain-core allows unauthorized users to read arbitrary files from the host file system
Modified: 7/7/2026
HIGHPyPI
GHSA-6qv9-48xg-fc7f· CVE-2025-65106, PYSEC-2026-1518LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-926x-3r5x-gfhw· CVE-2026-40087, PYSEC-2026-2563LangChain has incomplete f-string validation in prompt templates
Modified: 9/10/2026
CRITICAL9.3PyPI
GHSA-c67j-w6g6-q2cm· CVE-2025-68664, PYSEC-2026-373LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Modified: 9/10/2026
LOWPyPI
GHSA-h59x-p739-982c· CVE-2024-28088, PYSEC-2024-43LangChain directory traversal vulnerability
Modified: 12/3/2024
HIGH8.2PyPI
GHSA-pjwx-r37v-7724· CVE-2026-44843, PYSEC-2026-2564LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
Modified: 9/10/2026
MEDIUM5.9PyPI
GHSA-q84m-rmw3-4382· CVE-2024-1455, PYSEC-2026-1519LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-qh6h-p6c9-ff54· CVE-2026-34070, PYSEC-2026-2193LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
Modified: 9/10/2026
—PyPI
PYSEC-2024-45· CVE-2024-28088, GHSA-h59x-p739-982cModified: 6/10/2026
MEDIUM5.3PyPI
PYSEC-2026-1517· CVE-2024-10940, GHSA-5chr-fjjv-38qvlangchain-core allows unauthorized users to read arbitrary files from the host file system
Modified: 7/7/2026
—PyPI
PYSEC-2026-1518· CVE-2025-65106, GHSA-6qv9-48xg-fc7fLangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
Modified: 7/7/2026
MEDIUM5.9PyPI
PYSEC-2026-1519· CVE-2024-1455, GHSA-q84m-rmw3-4382LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-2193· CVE-2026-34070, GHSA-qh6h-p6c9-ff54Modified: 7/13/2026
LOW3.7PyPI
PYSEC-2026-2562· CVE-2026-26013, GHSA-2g6r-c272-w58rLangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2563· CVE-2026-40087, GHSA-926x-3r5x-gfhwLangChain has incomplete f-string validation in prompt templates
Modified: 7/13/2026
HIGH8.2PyPI
PYSEC-2026-2564· CVE-2026-44843, GHSA-pjwx-r37v-7724LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
Modified: 7/13/2026
CRITICAL9.3PyPI
PYSEC-2026-373· CVE-2025-68664, GHSA-c67j-w6g6-q2cmLangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
Modified: 7/2/2026