a-data-processing (0.0.1), ab-data-processing (0.0.1) +140 more potentially affected by CVE-2025-2828 via langchain-community (>=0.0.1, <=0.0.27)

langchain-community PYPI version =0.0.1, =0.0.6.dev1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.0.14 and more Source cves: CVE-2025-2828 Source advisory: MEND:CVE-2025-2828...

CVE-2025-2828: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in the RequestsToolkit component of the langchain-community package specifically, langchaincommunity.agenttoolkits.openapi.toolkit.RequestsToolkit in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does n...

PYSEC-2024-115

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tena...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: GHSA-45PG-36P6-83V9...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: OSV:GHSA-45PG-36P6-83V9...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: OSV:GHSA-6M59-8FMV-M5F9...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: GHSA-6M59-8FMV-M5F9...

assistant (>=1.1.0b1, <=1.2.1b1), autonomous-agent (0.0.1) +60 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.5, <=0.2.17)

langchain-community PYPI version =0.2.5, =1.1.0b1, =0.0.549, =0.2.0b1, =1.5.0, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.1.3, =0.1.3, =0.1.0, =0.1.3, =0.1.7 and more Source cves: CVE-2024-8309 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-8310287...

aiagentgraph (>=0.0.1, <=0.0.4a1), apsbot (>=0.2.0, <=0.3.1) +79 more potentially affected by CVE-2024-8309 via langchain-community (>=0.2.0, <=0.2.17)

langchain-community PYPI version =0.2.0, =0.0.1, =0.2.0, =1.1.0b1, =0.1.33, =0.0.546, =0.2.0b1, =1.5.0, =0.0.5, =0.0.2, =0.1.1, =0.0.2.7, =0.2.0, =0.4.0, =0.6.0 - docfusion 0.1.0 and more Source cves: CVE-2024-8309 Source advisory: MEND:CVE-2024-8309...

@aerocorp/cli (7.0.5), @aj-archipelago/cortex (>=1.1.7, <=1.3.16) +328 more potentially affected by CVE-2024-7042 via @langchain/community (>=0.0.15, <=0.3.2)

@langchain/community NPM version =0.0.15, =1.1.7, =0.0.33-alpha2, =3.114.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =2.0.0-next.2, =1.0.0-alpha.0, =0.2.13-alpha.0, =0.0.28, =0.0.11, =0.0.18 and more Source cves: CVE-2024-7042 Source advisory: MEND:CVE-2024-7042...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +322 more potentially affected by CVE-2024-5998 via langchain-community (>=0.0.1, <=0.2.2)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-5998 Source advisory: OSV:GHSA-F2JM-RW3H-6PHG...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +322 more potentially affected by CVE-2024-5998 via langchain-community (>=0.0.1, <=0.2.2)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-5998 Source advisory: GHSA-F2JM-RW3H-6PHG...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +355 more potentially affected by CVE-2024-5998 via langchain-community (>=0.0.1, <=0.2.9)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-5998 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-11356595...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +322 more potentially affected by CVE-2024-5998 via langchain-community (>=0.0.1, <=0.2.2)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-5998 Source advisory: MEND:CVE-2024-5998...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: OSV:GHSA-3HJH-JH2H-VRG6...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: GHSA-3HJH-JH2H-VRG6...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +353 more potentially affected by CVE-2024-3095 via langchain-community (>=0.0.1, <=0.2.7)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-3095 Source advisory: OSV:GHSA-Q25C-C977-4CMH...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +353 more potentially affected by CVE-2024-3095 via langchain-community (>=0.0.1, <=0.2.7)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-3095 Source advisory: GHSA-Q25C-C977-4CMH...

GHSA-3HJH-JH2H-VRG6 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: MEND:CVE-2024-2965...