MEDIUM6.5PyPI
GHSA-fv5p-p927-qmxr· CVE-2026-41481, PYSEC-2026-77LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
Modified: 9/10/2026
package
PyPI/langchain-text-splitters
pkg:pypi/langchain-text-splitters
HIGH7.5PyPI
GHSA-m42m-m8cr-8m58· CVE-2025-6985, PYSEC-2026-1520LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
Modified: 9/10/2026
HIGH7.5PyPI
PYSEC-2026-1520· CVE-2025-6985, GHSA-m42m-m8cr-8m58LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-77· CVE-2026-41481, GHSA-fv5p-p927-qmxrModified: 5/20/2026