6 matches found
CVE-2024-2965
A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +602 more potentially affected by CVE-2024-2965 via langchain (>=0.0.27, <=0.2.4)
langchain PYPI version =0.0.27, =0.1.0, =0.1.7, =0.2.1, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.52 and more Source cves: CVE-2024-2965 Source advisory: OSV:GHSA-3HJH-JH2H-VRG6...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)
langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: OSV:GHSA-3HJH-JH2H-VRG6...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +602 more potentially affected by CVE-2024-2965 via langchain (>=0.0.27, <=0.2.4)
langchain PYPI version =0.0.27, =0.1.0, =0.1.7, =0.2.1, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.52 and more Source cves: CVE-2024-2965 Source advisory: OSV:PYSEC-2024-118...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +327 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)
langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: MEND:CVE-2024-2965...
CVE-2024-2965 Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain
A Denial-of-Service DoS vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the...