Start for Free
pypi

langchain

View on pypi registry
41 Total advisories
41 Vulnerabilities
0 Malware

Dependency scanning

Check whether langchain is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

HIGH 7.1
PyPI

CVE-2026-45134

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
CRITICAL 9.8
PyPI

CVE-2023-32785

Langchain SQL Injection vulnerability
CRITICAL 9.8
PyPI

CVE-2023-32785

Langchain SQL Injection vulnerability
MEDIUM 5.1
PyPI

GHSA-gr75-jv2w-4656

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
CRITICAL 9.8
PyPI

CVE-2023-36281

CVE-2023-36281
CRITICAL 9.8
PyPI

CVE-2023-39659

CVE-2023-39659
CRITICAL 9.8
PyPI

CVE-2023-38896

CVE-2023-38896
CRITICAL 9.8
PyPI

CVE-2023-38860

CVE-2023-38860
CRITICAL 9.8
PyPI

CVE-2023-36095

CVE-2023-36095
CRITICAL 9.8
PyPI

CVE-2024-8309

CVE-2024-8309
MEDIUM 4.7
PyPI

CVE-2024-2965

CVE-2024-2965
UNKNOWN
PyPI

CVE-2023-36258

CVE-2023-36258
UNKNOWN
PyPI

CVE-2023-34541

CVE-2023-34541
UNKNOWN
PyPI

CVE-2023-34540

CVE-2023-34540
UNKNOWN
PyPI

CVE-2023-46229

CVE-2023-46229
UNKNOWN
PyPI

CVE-2023-29374

CVE-2023-29374
UNKNOWN
PyPI

CVE-2023-36188

CVE-2023-36188
UNKNOWN
PyPI

CVE-2023-36189

CVE-2023-36189
CRITICAL 9.1
PyPI

PYSEC-2024-111

PYSEC-2024-111
LOW 3.7
PyPI

CVE-2024-0243

langchain Server-Side Request Forgery vulnerability
CRITICAL 9.8
PyPI

CVE-2023-34540

Langchain OS Command Injection vulnerability
CRITICAL 9.8
PyPI

CVE-2023-39631

Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
CRITICAL 9.8
PyPI

CVE-2023-36188

langchain vulnerable to arbitrary code execution
CRITICAL 9.8
PyPI

CVE-2023-29374

LangChain vulnerable to code injection
CRITICAL 9.8
PyPI

CVE-2023-34541

Langchain vulnerable to arbitrary code execution
UNKNOWN
PyPI

CVE-2024-28088

LangChain directory traversal vulnerability
CRITICAL 9.8
PyPI

CVE-2023-36258

langchain arbitrary code execution vulnerability
MEDIUM 4.9
PyPI

CVE-2024-8309

Langchain SQL Injection vulnerability
CRITICAL 9.8
PyPI

PYSEC-2024-114

PYSEC-2024-114
MEDIUM 4.2
PyPI

CVE-2024-2965

Denial of service in langchain-community
HIGH 7.5
PyPI

CVE-2023-36189

langchain SQL Injection vulnerability
CRITICAL 9.8
PyPI

CVE-2023-36281

langchain vulnerable to arbitrary code execution
HIGH 8.8
PyPI

CVE-2023-46229

LangChain Server Side Request Forgery vulnerability
CRITICAL 9.8
PyPI

CVE-2023-38896

LangChain vulnerable to arbitrary code execution
CRITICAL 9.8
PyPI

CVE-2023-39659

LangChain vulnerable to arbitrary code execution
CRITICAL 9.8
PyPI

CVE-2023-36095

langchain Code Injection vulnerability
CRITICAL 9.8
PyPI

CVE-2023-38860

LangChain vulnerable to arbitrary code execution
MEDIUM 6.5
PyPI

CVE-2024-3571

langchain vulnerable to path traversal
UNKNOWN
PyPI

CVE-2024-28088

CVE-2024-28088
HIGH 7.5
PyPI

CVE-2023-32786

Langchain Server-Side Request Forgery vulnerability
CRITICAL 9.8
PyPI

CVE-2023-39631

CVE-2023-39631

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes