14427 matches found
CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
CVE-2025-6985
The CVE-2025-6985 entry concerns LangChain Text Splitters (langchain-text-splitters) v0.3.8, with an XML External Entity (XXE) risk due to unsafe XSLT parsing. The connected docs explain that arbitrary XSLT stylesheets are parsed using lxml.etree.parse() and lxml.etree.XSLT() without hardening, a...
langchain-text-splitters 代码问题漏洞
langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...
Directory Traversal
Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...
EUVD-2022-4992
Malicious code in bioql PyPI...
EUVD-2024-31750
Malicious code in bioql PyPI...
EUVD-2023-49675
Malicious code in bioql PyPI...
EUVD-2023-57819
Malicious code in bioql PyPI...
EUVD-2025-20538
Malicious code in bioql PyPI...
EUVD-2023-27003
Malicious code in bioql PyPI...
EUVD-2024-45524
Malicious code in bioql PyPI...
EUVD-2025-22739
Malicious code in bioql PyPI...
EUVD-2021-34684
Malicious code in bioql PyPI...
EUVD-2023-24351
Malicious code in bioql PyPI...
EUVD-2022-53384
Malicious code in bioql PyPI...
EUVD-2023-0727
Malicious code in bioql PyPI...
EUVD-2024-0557
Malicious code in bioql PyPI...
EUVD-2022-30252
Malicious code in bioql PyPI...