GHSA-M42M-M8CR-8M58 LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...

EUVD-2025-21532

Malicious code in bioql PyPI...

EUVD-2024-18635

Malicious code in bioql PyPI...

EUVD-2024-17376

Malicious code in bioql PyPI...

EUVD-2023-46232

Malicious code in bioql PyPI...

EUVD-2025-24447

Malicious code in bioql PyPI...

EUVD-2024-41409

Malicious code in bioql PyPI...

EUVD-2022-4909

Malicious code in bioql PyPI...

EUVD-2022-45997

Malicious code in bioql PyPI...

EUVD-2022-2086

Malicious code in bioql PyPI...

EUVD-2025-20917

Malicious code in bioql PyPI...

EUVD-2022-46000

Malicious code in bioql PyPI...

EUVD-2024-18894

Malicious code in bioql PyPI...

EUVD-2022-1899

Malicious code in bioql PyPI...

EUVD-2021-6836

Malicious code in bioql PyPI...

EUVD-2022-2208

Malicious code in bioql PyPI...

EUVD-2024-40291

Malicious code in bioql PyPI...

EUVD-2024-50850

Malicious code in bioql PyPI...

EUVD-2021-29014

Malicious code in bioql PyPI...

EUVD-2022-28647

Malicious code in bioql PyPI...