langchain-community
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Langchain Community Vulnerable to XML External Entity (XXE) Attacks | langchain-communityOpenShift Lightspeed/openshift-lightspeed/lightspeed-service-api-rhel9 | PyPIRed Hat | High | Fix reported | |
| Denial of service in langchain-community | langchain-communitylangchain | PyPI | Medium | Fix reported | |
| LangChain pickle deserialization of untrusted data | langchain-communitylangchain | PyPI | High | Fix reported | |
| Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever | langchain-community | PyPI | Medium | Fix reported | |
| Langchain SQL Injection vulnerability | langchain-communitylangchain | PyPIRed Hat | Low | Fix reported | |
| LangChain Community SSRF vulnerability exists in RequestsToolkit component | langchain-community | PyPI | High | Fix reported | |
| PYSEC-2024-278 | langchain-community | PyPI | Critical | No fix reported |