ragbuilder (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-26013 via langchain-core (0.2.20)

langchain-core PYPI version 0.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ragbuilder =0.1.0, =0.1.5 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

jpl-rosa (>=1.0.3, <=1.0.4), searchbot (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-26013 via langchain-core (0.2.32)

langchain-core PYPI version 0.2.32 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - jpl-rosa =1.0.3, =1.0.0, =1.0.8 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.10)

langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

dsrag (>=0.1.0, <=0.3.8), jpl-rosa (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-26013 via langchain-core (0.2.12)

langchain-core PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - dsrag =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

baicai-base (0.1.2), baicai-tutor (0.1.0) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.57)

langchain-core PYPI version 0.3.57 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 - cneura-ai =0.1.1, =0.1.122 Source cves: CVE-2026-26013 Source advisory:...

hushhai (0.0.1), longtrainer (>=0.3.1, <=0.3.4) potentially affected by CVE-2026-26013 via langchain-core (0.3.17)

langchain-core PYPI version 0.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - hushhai 0.0.1 - longtrainer =0.3.1, =0.3.4 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

docksec (>=2026.2.23, <=2026.5.6) potentially affected by CVE-2026-26013 via langchain-core (0.3.26)

langchain-core PYPI version 0.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - docksec =2026.2.23, =2026.5.6 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

PT-2026-7722

Name of the Vulnerable Software and Affected Versions LangChain versions prior to 1.1.14 Description The RecursiveUrlLoader class within the @langchain/community component is a web crawler that recursively follows links from a starting URL. The preventOutside option, intended to restrict crawling...

LangChain code-related vulnerabilities

LangChain is an open-source framework developed by LangChain for creating applications powered by large language models LLMs. Versions of LangChain prior to 1.1.14 contained code vulnerabilities. These vulnerabilities stemmed from insufficient URL validation in the RecursiveUrlLoader class within...

CVE-2026-26019: Server-Side Request Forgery (SSRF)

LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively follows links from a starting URL. Its preventOutside option enabled by default is intended to restrict crawling to the same site...

Server-side Request Forgery (SSRF)

Overview langchain-openai is an An integration package connecting OpenAI and LangChain Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the ChatOpenAI.getnumtokensfrommessages function. An attacker can cause the server to make internal network requests,...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +54 more potentially affected by CVE-2026-26013 via langchain-openai (>=1.0.0a4, <=1.1.7)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.1.0, =3.0.3, =0.0.48, =0.0.54, =0.1.2, =0.0.597, =0.1.0, =0.1.0, =0.2.2 - coze-coding-utils 0.2.0 - datascav-switch 1.1.0 and more Source cves: CVE-2026-26013 Source advisory: SNYK:PYTHON-LANGCHAINOPENAI-15263095...

CVE-2026-26013 LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.getnumtokensfrommessages method fetches arbitrary imageurl values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Reque...

CVE-2026-26013 LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.getnumtokensfrommessages method fetches arbitrary imageurl values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Reque...

CVE-2026-26013 LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.getnumtokensfrommessages method fetches arbitrary imageurl values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Reque...

CVE-2026-26013

The CVE affects LangChain’s ChatOpenAI component, where get_num_tokens_from_messages() can fetch arbitrary image_url values without validation when counting tokens for vision-enabled models, enabling SSRF by user-provided URLs. Root cause: insufficient validation of image_url during token countin...

CVE-2026-26013

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.getnumtokensfrommessages method fetches arbitrary imageurl values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Reque...

a-beta-scalekit (>=3.0.1, <=4.0.2), a-data-processing (0.0.1) +2383 more potentially affected by CVE-2026-26013 via langchain-core (>=0.0.1, <=1.2.9)

langchain-core PYPI version =0.0.1, =3.0.1, =0.1.0, =0.1.3, =0.1.0, =0.1.0b0, =0.0.1, =4.8.2, =0.0.1a1, =0.1.3, =0.1.5 and more Source cves: CVE-2026-26013 Source advisory: MEND:CVE-2026-26013...

PT-2026-7475

Name of the Vulnerable Software and Affected Versions LangChain versions prior to 1.2.11 Description LangChain is a framework used for building applications powered by large language models LLMs. A flaw exists in the ChatOpenAI.get num tokens from messages method where it retrieves image URLs...