langchain vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-55443Mediumlangchain: LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders CVE-2026-45134Highlangsmith: LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning CVE-2025-68665High@langchain/core: LangChain serialization injection vulnerability enables secret extraction CVE-2024-8309Lowlangchain: Langchain SQL Injection vulnerability CVE-2024-7774Mediumlangchain: Langchain Path Traversal vulnerability CVE-2024-2965Mediumlangchain-community: Denial of service in langchain-community CVE-2024-3571Mediumlangchain: langchain vulnerable to path traversal CVE-2024-28088Lowlangchain: LangChain directory traversal vulnerability CVE-2024-0243Lowlangchain: langchain Server-Side Request Forgery vulnerability CVE-2023-32786Highlangchain: Langchain Server-Side Request Forgery vulnerability CVE-2023-32785Criticallangchain: Langchain SQL Injection vulnerability CVE-2023-46229Highlangchain: LangChain Server Side Request Forgery vulnerability CVE-2023-39631Criticallangchain: Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library CVE-2023-36281Criticallangchain: langchain vulnerable to arbitrary code execution CVE-2023-38860Criticallangchain: LangChain vulnerable to arbitrary code execution CVE-2023-39659Criticallangchain: LangChain vulnerable to arbitrary code execution CVE-2023-38896Criticallangchain: LangChain vulnerable to arbitrary code execution CVE-2023-36095Criticallangchain: langchain Code Injection vulnerability CVE-2023-36189Highlangchain: langchain SQL Injection vulnerability CVE-2023-36188Criticallangchain: langchain vulnerable to arbitrary code execution CVE-2023-36258Criticallangchain: langchain arbitrary code execution vulnerability CVE-2023-34541Criticallangchain: Langchain vulnerable to arbitrary code execution CVE-2023-34540Criticallangchain: Langchain OS Command Injection vulnerability CVE-2023-29374Criticallangchain: LangChain vulnerable to code injection

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo