CVE-2026-72848

A flaw was found in langchain-community. An attacker who controls or influences an ingested sitemap can bypass domain restrictions in the SitemapLoader component by pointing a nested sitemap entry at an internal address. This allows the server to fetch internal resources even when...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the parsesitemap. An attacker can access internal resources and disclose sensitive information by supplying a crafted sitemap with nested sitemap entries that reference internal or restricted...

CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +329 more potentially affected by CVE-2024-2965 via langchain-community (>=0.0.1, <=0.2.4)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-2965 Source advisory: OSV:PYSEC-2026-2561...

Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

PYSEC-2026-2561 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

PT-2026-59218

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parse sitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +324 more potentially affected by CVE-2024-5998 via langchain-community (>=0.0.1, <=0.2.2)

langchain-community PYPI version =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.0.6.dev1, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.19.0, =0.1.0, =0.1.4 and more Source cves: CVE-2024-5998 Source advisory: OSV:PYSEC-2026-1514...

PYSEC-2026-1516 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever

A Server-Side Request Forgery SSRF vulnerability exists in the Web Research Retriever component in langchain-community langchain-community.retrievers.webresearch.WebResearchRetriever. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet...

CVE-2026-12866

A flaw was found in expr-eval. A remote attacker can exploit this vulnerability by supplying crafted expressions to the toJSFunction API. These expressions are then compiled into native code using new Function, allowing the attacker to execute arbitrary JavaScript code. This can lead to arbitrary...

langchain-community (0.2.14), langchain-pangu (>=0.1.0, <=0.2.3) +1 more potentially affected by CVE-2026-55443 via langchain (0.2.15)

langchain PYPI version 0.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langchain-community 0.2.14 - langchain-pangu =0.1.0, =0.1.29, =0.1.49 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

hackathon-evaluation-rag (>=0.1.0, <=0.1.3), langchain-community (0.2.0rc1) potentially affected by CVE-2026-55443 via langchain (0.2.0rc2)

langchain PYPI version 0.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - hackathon-evaluation-rag =0.1.0, =0.1.3 - langchain-community 0.2.0rc1 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

hackathon-evaluation-rag (>=0.1.0, <=0.1.3), langchain-community (0.2.0rc1) potentially affected by CVE-2026-55443 via langchain (0.2.0rc2)

langchain PYPI version 0.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - hackathon-evaluation-rag =0.1.0, =0.1.3 - langchain-community 0.2.0rc1 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

ROOT-APP-NPM-CVE-2026-26019 CVE-2026-26019 in @rootio/langchain__community - Patched by Root

Root has patched CVE-2026-26019 in the @rootio/langchaincommunity package for Root:npm. Multiple fixed versions available...

langchain-community (0.2.14), langchain-ollama (0.1.2) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.2.36)

langchain-core PYPI version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - langchain-community 0.2.14 - langchain-ollama 0.1.2 - repo2vec =0.1.6, =0.1.8 Source cves: CVE-2026-34070 Source advisory:...

LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

Summary A redirect-based Server-Side Request Forgery SSRF bypass exists in RecursiveUrlLoader in @langchain/community. The loader validates the initial URL but allows the underlying fetch to follow redirects automatically, which permits a transition from a safe public URL to an internal or metada...

@cognigy/cognigy-cli (>=1.9.7, <=2.2.7), @forestadmin/agent (>=1.71.0, <=1.72.9) +25 more potentially affected by CVE-2026-27795 via @langchain/community (>=1.0.0, <=1.1.16)

@langchain/community NPM version =1.0.0, =1.9.7, =1.71.0, =1.1.0, =1.12.76, =0.0.1, =0.1.0, =0.2.0, =0.20.0, =0.21.0, =1.0.1, =1.0.24, =3.1.0, =3.1.3 and more Source cves: CVE-2026-27795 Source advisory: OSV:GHSA-MPHV-75CG-56WG...

Server-side Request Forgery (SSRF)

Overview @langchain/community is a Third-party integrations for LangChain.js Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the RecursiveUrlLoader class. An attacker can access internal network resources or sensitive cloud metadata by supplying a public U...