844 matches found
ROOT-APP-PYPI-CVE-2026-34070 CVE-2026-34070 in langchain-core - Patched by Root
Root has patched CVE-2026-34070 in the langchain-core package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-44843 CVE-2026-44843 in langchain-core - Patched by Root
Root has patched CVE-2026-44843 in the langchain-core package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-65106 CVE-2025-65106 in langchain-core - Patched by Root
Root has patched CVE-2025-65106 in the langchain-core package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-68664 CVE-2025-68664 in langchain-core - Patched by Root
Root has patched CVE-2025-68664 in the langchain-core package for Root:PyPI. Multiple fixed versions available...
Nmap-API
Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items...
langgrinch-cve-2025-68664-analysis
LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...
CVE-2025-68664-LangGrinch-PoC
📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start...
Reproduce-CVE-2024-21513
Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...
CVE-2024-8309
Prova de Conceito para a Vulnerabilidade Langchain CVE-2024–8309 Visão Geral Esta configuração demonstra uma prova de conceito para a vulnerabilidade de injeção de prompt na classe GraphCypherQAChain que permite injeção de SQL em um banco de dados Neo4j. Componentes: 1. Banco de Dados Neo4j :...
CVE-2024-21513
CVE-2024-21513 PoC per CVE-2024-21513 Exploit originale documentato da Snyk Security Research Exploit CVE-2024-21513 è una vulnerabilità in langchain-experimental in cui risultati di query SQL non validati venivano passati a eval di Python, consentendo l'esecuzione di codice remoto tramite...
CVE-2026-72848
A flaw was found in langchain-community. An attacker who controls or influences an ingested sitemap can bypass domain restrictions in the SitemapLoader component by pointing a nested sitemap entry at an internal address. This allows the server to fetch internal resources even when...
CVE-2026-34070
Ho Trovato un Bug di Path Traversal in LangChain Che Potrebbe Far Trapelare le Tue Credenziali Cloud Come un'API legacy dimenticata in uno dei framework AI più popolari ha esposto silenziosamente milioni di applicazioni a letture arbitrarie di file. C'è una certa sensazione che provi quando una...
CVE-2025-68664
CVE-2025-68664 Tudo o que quero no Natal são os seus segredos: LangGrinch ataca o núcleo do LangChain CVE-2025-68664 Autor: Yarden Porat Pesquisa da Cyata: Vulnerabilidade LangGrinch no LangChain Publicado em: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Ontem o LangChain...
LangAlpha
Un framework per agenti di investimento 'vibe' LangAlpha è progettato per aiutare a interpretare i mercati finanziari e supportare le decisioni di investimento. Inglese ｜ 简体中文 ｜ 日本語 Per iniziare • Documentazione API • Agent Core • Backend • Web • TUI • Skills • MCP Fissa un riepilogo di notizie...
CVE-2026-72848
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
CVE-2026-72848
CVE-2026-72848 is a Server-Side Request Forgery (SSRF) in langchain_community 's SitemapLoader.parse_sitemap (document_loaders/sitemap.py). The restrict_to_same_domain guard is applied only to leaf URL entries; nested sitemap index entries bypass it entirely, passing the child loc directly to Web...
PT-2026-79263
Name of the Vulnerable Software and Affected Versions langchain-community affected versions not specified Description The SitemapLoader.parse sitemap function in langchain community/document loaders/sitemap.py fails to apply the restrict to same domain control to nested sitemap entries. While lea...