langchain vulnerabilities — 45 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
7.1 high CVE-2026-45134: LangChain SDK Public Prompt Pull Vulnerability Leading to Deserialization Risks langchain PyPI 13 Jul 2026 0.3.30
4.9 medium CVE-2024-8309: Langchain SQL Injection Vulnerability langchain PyPI 07 Jul 2026 0.2.0
6.5 medium CVE-2024-3571: langchain Path Traversal Vulnerability langchain PyPI 07 Jul 2026 0.0.353
3.7 low CVE-2024-0243: langchain Server-Side Request Forgery Vulnerability langchain PyPI 07 Jul 2026 0.1.0
7.5 high CVE-2023-32786: Langchain Server-Side Request Forgery Vulnerability langchain PyPI 07 Jul 2026 0.0.329
9.8 critical CVE-2023-32785: Langchain SQL Injection Vulnerability langchain PyPI 29 Jun 2026 0.0.247
5.5 medium CVE-2026-55443: LangChain Path Resolution Vulnerability Leading to Potential File Disclosure langchain PyPI 22 Jun 2026 1.3.9
5.1 medium Path Traversal and Sandbox Escape Vulnerability in LangChain langchain PyPI 16 Jun 2026 1.3.9
9.8 critical CVE-2024-8309: langchain SQL Injection Vulnerability via Prompt Injection langchain PyPI 05 Nov 2024 c2a3021bb0c5f54649d380b42a0684ca5778c255
9.1 critical CVE-2024-7774: langchain Path Traversal Vulnerability in getFullPath Method langchain PyPI 29 Oct 2024 a0fad77d6b569e5872bd4a9d33be0c0785e538a9
9.8 critical CVE-2024-7042: langchain SQL Injection Vulnerability in GraphCypherQAChain Class langchain PyPI 29 Oct 2024 615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6
7.8 high CVE-2024-5998: langchain Package Vulnerability Allows Arbitrary Command Execution via Pickle Deserialization langchain PyPI 17 Sep 2024 0.2.9
4.7 medium CVE-2024-2965: langchain Denial-of-Service Vulnerability in SitemapLoader langchain PyPI 06 Jun 2024 73c42306745b0831aa6fe7fe4eeb70d2c2d87a82
6.5 medium Path Traversal Vulnerability in langchain langchain PyPI 16 Apr 2024 0.0.353
Low LangChain Directory Traversal Vulnerability in langchain langchain PyPI 04 Mar 2024 0.0.339
Unrated CVE-2024-28088: langchain Directory Traversal Vulnerability langchain PyPI 04 Mar 2024 0.1.11
3.7 low CVE-2024-0243: langchain Server-Side Request Forgery vulnerability langchain PyPI 26 Feb 2024 0.1.0
9.8 critical Langchain SQL Injection Vulnerability in langchain langchain PyPI 21 Oct 2023 0.0.247
7.5 high Langchain Server-Side Request Forgery vulnerability in langchain langchain PyPI 21 Oct 2023 0.0.329
8.8 high LangChain Server Side Request Forgery Vulnerability (CVE-2023-46229) langchain PyPI 19 Oct 2023 0.0.317
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.