966 matches found
CVE-2025-6985
The CVE-2025-6985 entry concerns LangChain Text Splitters (langchain-text-splitters) v0.3.8, with an XML External Entity (XXE) risk due to unsafe XSLT parsing. The connected docs explain that arbitrary XSLT stylesheets are parsed using lxml.etree.parse() and lxml.etree.XSLT() without hardening, a...
CVE-2025-6985: Improper Restriction of XML External Entity Reference
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
langchain-text-splitters 代码问题漏洞
langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...
EUVD-2023-0113
Malicious code in bioql PyPI...
EUVD-2025-7069
Malicious code in bioql PyPI...
EUVD-2024-2778
Malicious code in bioql PyPI...
EUVD-2023-0110
Malicious code in bioql PyPI...
EUVD-2024-0091
Malicious code in bioql PyPI...
EUVD-2025-23002
Malicious code in bioql PyPI...
EUVD-2025-29216
Malicious code in bioql PyPI...
EUVD-2025-19477
Malicious code in bioql PyPI...
EUVD-2024-0987
Malicious code in bioql PyPI...
EUVD-2023-0121
Malicious code in bioql PyPI...
EUVD-2023-0115
Malicious code in bioql PyPI...
EUVD-2023-0117
Malicious code in bioql PyPI...
EUVD-2025-18953
Malicious code in bioql PyPI...
EUVD-2023-0114
Malicious code in bioql PyPI...
EUVD-2025-19478
Malicious code in bioql PyPI...