langchain (pypi) security advisories

CRITICAL 9.8

PyPI

CVE-2023-36281

Aug 22, 2023

CRITICAL 9.8

PyPI

CVE-2023-39659

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-38896

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-38860

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-36095

Aug 5, 2023

CRITICAL 9.8

PyPI

CVE-2024-8309

Nov 5, 2024

MEDIUM 4.7

PyPI

CVE-2024-2965

Jun 6, 2024

UNKNOWN

PyPI

CVE-2023-36258

Jul 3, 2023

UNKNOWN

PyPI

CVE-2023-34541

Jun 20, 2023

UNKNOWN

PyPI

CVE-2023-34540

Jun 14, 2023

UNKNOWN

PyPI

CVE-2023-46229

Oct 19, 2023

UNKNOWN

PyPI

CVE-2023-29374

Apr 5, 2023

UNKNOWN

PyPI

CVE-2023-36188

Jul 6, 2023

UNKNOWN

PyPI

CVE-2023-36189

Jul 6, 2023

HIGH 7.1

PyPI

CVE-2026-45134

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

May 13, 2026

CRITICAL 9.1

PyPI

PYSEC-2024-111

Oct 29, 2024

LOW 3.7

PyPI

CVE-2024-0243

langchain Server-Side Request Forgery vulnerability

Feb 26, 2024

CRITICAL 9.8

PyPI

CVE-2023-34540

Langchain OS Command Injection vulnerability

Jun 14, 2023

CRITICAL 9.8

PyPI

CVE-2023-39631

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

Sep 1, 2023

CRITICAL 9.8

PyPI

CVE-2023-36188

langchain vulnerable to arbitrary code execution

Jul 6, 2023

CRITICAL 9.8

PyPI

CVE-2023-29374

LangChain vulnerable to code injection

Apr 5, 2023

CRITICAL 9.8

PyPI

CVE-2023-34541

Langchain vulnerable to arbitrary code execution

Jun 20, 2023

UNKNOWN

PyPI

CVE-2024-28088

LangChain directory traversal vulnerability

Mar 4, 2024

CRITICAL 9.8

PyPI

CVE-2023-36258

langchain arbitrary code execution vulnerability

Jul 3, 2023

MEDIUM 4.9

PyPI

CVE-2024-8309

Langchain SQL Injection vulnerability

Oct 29, 2024

CRITICAL 9.8

PyPI

CVE-2023-32785

Langchain SQL Injection vulnerability

Oct 21, 2023

CRITICAL 9.8

PyPI

PYSEC-2024-114

Oct 29, 2024

MEDIUM 4.2

PyPI

CVE-2024-2965

Denial of service in langchain-community

Jun 6, 2024

HIGH 7.5

PyPI

CVE-2023-36189

langchain SQL Injection vulnerability

Jul 6, 2023

CRITICAL 9.8

PyPI

CVE-2023-36281

langchain vulnerable to arbitrary code execution

Aug 22, 2023

HIGH 8.8

PyPI

CVE-2023-46229

LangChain Server Side Request Forgery vulnerability

Oct 19, 2023

CRITICAL 9.8

PyPI

CVE-2023-38896

LangChain vulnerable to arbitrary code execution

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-39659

LangChain vulnerable to arbitrary code execution

Aug 15, 2023

CRITICAL 9.8

PyPI

CVE-2023-36095

langchain Code Injection vulnerability

Aug 5, 2023

CRITICAL 9.8

PyPI

CVE-2023-38860

LangChain vulnerable to arbitrary code execution

Aug 15, 2023

MEDIUM 6.5

PyPI

CVE-2024-3571

langchain vulnerable to path traversal

Apr 16, 2024

UNKNOWN

PyPI

CVE-2024-28088

Mar 4, 2024

HIGH 7.5

PyPI

CVE-2023-32786

Langchain Server-Side Request Forgery vulnerability

Oct 21, 2023

CRITICAL 9.8

PyPI

CVE-2023-39631

Sep 1, 2023

langchain

Vulnerabilities

CVE-2023-36281

CVE-2023-39659

CVE-2023-38896

CVE-2023-38860

CVE-2023-36095

CVE-2024-8309

CVE-2024-2965

CVE-2023-36258

CVE-2023-34541

CVE-2023-34540

CVE-2023-46229

CVE-2023-29374

CVE-2023-36188

CVE-2023-36189

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

PYSEC-2024-111

langchain Server-Side Request Forgery vulnerability

Langchain OS Command Injection vulnerability

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

langchain vulnerable to arbitrary code execution

LangChain vulnerable to code injection

Langchain vulnerable to arbitrary code execution

LangChain directory traversal vulnerability

langchain arbitrary code execution vulnerability

Langchain SQL Injection vulnerability

Langchain SQL Injection vulnerability

PYSEC-2024-114

Denial of service in langchain-community

langchain SQL Injection vulnerability

langchain vulnerable to arbitrary code execution

LangChain Server Side Request Forgery vulnerability

LangChain vulnerable to arbitrary code execution

LangChain vulnerable to arbitrary code execution

langchain Code Injection vulnerability

LangChain vulnerable to arbitrary code execution

langchain vulnerable to path traversal

CVE-2024-28088

Langchain Server-Side Request Forgery vulnerability

CVE-2023-39631

Start Securing