langchain-0.1.9-py3-none-any.whl: 11 vulnerabilities (highest severity is: 9.8) reachable #4
Description
Vulnerable Library - langchain-0.1.9-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/45/05/2d5c38c7fa1a091a61e018070b6878410d256be577e5154843d339e59b2c/langchain-0.1.9-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain-0.1.9.dist-info
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Vulnerabilities
| Vulnerability | Severity |  CVSS |
Exploit Maturity | EPSS | Dependency | Type | Fixed in (langchain version) | Remediation Possible** | Reachability |
|---|---|---|---|---|---|---|---|---|---|
| CVE-2024-28088 |  High |
8.1 | Not Defined | 10.7% | langchain-0.1.9-py3-none-any.whl | Direct | 0.1.12 | ✅ |
|
| CVE-2024-2057 |  Medium |
6.3 | Not Defined | 0.0% | langchain-0.1.9-py3-none-any.whl | Direct | 0.1.12 | ✅ |
|
| CVE-2024-7042 | Medium |
4.9 | Not Defined | 0.1% | langchain-0.1.9-py3-none-any.whl | Direct | @langchain/community - 0.3.3 | ❌ |
|
| CVE-2024-2965 | Medium |
4.2 | Not Defined | 0.0% | langchain-0.1.9-py3-none-any.whl | Direct | 0.2.5 | ✅ |
|
| CVE-2024-8309 |  Critical |
9.8 | Not Defined | 2.2% | langchain_community-0.0.38-py3-none-any.whl | Transitive | 0.2.0 | ✅ |
|
| CVE-2025-68664 | Critical |
9.3 | Not Defined | 0.0% | langchain_core-0.1.53-py3-none-any.whl | Transitive | 0.2.6 | ✅ |
|
| CVE-2025-65106 | High |
8.2 | Not Defined | 0.1% | langchain_core-0.1.53-py3-none-any.whl | Transitive | 0.2.6 | ✅ |
|
| CVE-2024-3095 | High |
7.7 | Not Defined | 0.2% | langchain_community-0.0.38-py3-none-any.whl | Transitive | 0.2.0 | ✅ |
|
| CVE-2025-6984 | High |
7.5 | Not Defined | 0.0% | langchain_community-0.0.38-py3-none-any.whl | Transitive | 0.2.0 | ✅ |
|
| CVE-2025-67221 | High |
7.5 | Not Defined | 0.1% | orjson-3.11.5-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl | Transitive | N/A* | ❌ |
|
| CVE-2026-26013 |  Low |
3.7 | Not Defined | 0.0% | langchain_core-0.1.53-py3-none-any.whl | Transitive | 0.2.6 | ✅ |
|
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2024-28088
Vulnerable Library - langchain-0.1.9-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/45/05/2d5c38c7fa1a091a61e018070b6878410d256be577e5154843d339e59b2c/langchain-0.1.9-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain-0.1.9.dist-info
Dependency Hierarchy:
- ❌ langchain-0.1.9-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
This vulnerability is potentially reachable
AutoPrompt/utils/llm_chain.py (Application)
-> ❌ langchain-0.1.9/langchain/chains/openai_functions/__init__.py (Vulnerable Component)
Vulnerability Details
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
Publish Date: 2024-03-03
URL: CVE-2024-28088
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 10.7%
CVSS 3 Score Details (8.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Release Date: 2024-03-03
Fix Resolution: 0.1.12
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2024-2057
Vulnerable Library - langchain-0.1.9-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/45/05/2d5c38c7fa1a091a61e018070b6878410d256be577e5154843d339e59b2c/langchain-0.1.9-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain-0.1.9.dist-info
Dependency Hierarchy:
- ❌ langchain-0.1.9-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
This vulnerability is potentially reachable
AutoPrompt/utils/llm_chain.py (Application)
-> ❌ langchain-0.1.9/langchain/chains/openai_functions/__init__.py (Vulnerable Component)
Vulnerability Details
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-255372.
Publish Date: 2024-03-01
URL: CVE-2024-2057
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.0%
CVSS 3 Score Details (6.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: Low
Suggested Fix
Type: Upgrade version
Release Date: 2024-03-01
Fix Resolution: 0.1.12
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2024-7042
Vulnerable Library - langchain-0.1.9-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/45/05/2d5c38c7fa1a091a61e018070b6878410d256be577e5154843d339e59b2c/langchain-0.1.9-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain-0.1.9.dist-info
Dependency Hierarchy:
- ❌ langchain-0.1.9-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
This vulnerability is potentially reachable
AutoPrompt/utils/llm_chain.py (Application)
-> ❌ langchain-0.1.9/langchain/chains/__init__.py (Vulnerable Component)
Vulnerability Details
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Publish Date: 2024-10-29
URL: CVE-2024-7042
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.1%
CVSS 3 Score Details (4.9)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: Low
Suggested Fix
Type: Upgrade version
Origin: GHSA-6m59-8fmv-m5f9
Release Date: 2024-10-29
Fix Resolution: @langchain/community - 0.3.3
CVE-2024-2965
Vulnerable Library - langchain-0.1.9-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/45/05/2d5c38c7fa1a091a61e018070b6878410d256be577e5154843d339e59b2c/langchain-0.1.9-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain-0.1.9.dist-info
Dependency Hierarchy:
- ❌ langchain-0.1.9-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
This vulnerability is potentially reachable
AutoPrompt/utils/llm_chain.py (Application)
-> ❌ langchain-0.1.9/langchain/chains/openai_functions/__init__.py (Vulnerable Component)
Vulnerability Details
A Denial-of-Service (DoS) vulnerability exists in the SitemapLoader class of the langchain-ai/langchain repository, affecting all versions. The parse_sitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality.
Publish Date: 2024-06-06
URL: CVE-2024-2965
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.0%
CVSS 3 Score Details (4.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Physical
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
Suggested Fix
Type: Upgrade version
Origin: GHSA-3hjh-jh2h-vrg6
Release Date: 2024-06-06
Fix Resolution: 0.2.5
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2024-8309
Vulnerable Library - langchain_community-0.0.38-py3-none-any.whl
Community contributed LangChain integrations.
Library home page: https://files.pythonhosted.org/packages/1b/d3/1f4d1941ae5a627299c8ea052847b99ad6674b97b699d8a08fc4faf25d3e/langchain_community-0.0.38-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_community-0.0.38.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_community-0.0.38-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Publish Date: 2024-10-29
URL: CVE-2024-8309
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 2.2%
CVSS 3 Score Details (9.8)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
Suggested Fix
Type: Upgrade version
Origin: https://huntr.com/bounties/8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5
Release Date: 2024-10-29
Fix Resolution (langchain-community): 0.2.18
Direct dependency fix Resolution (langchain): 0.2.0
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2025-68664
Vulnerable Library - langchain_core-0.1.53-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/6a/10/285fa149ce95300d91ea0bb124eec28889e5ebbcb59434d1fe2f31098d72/langchain_core-0.1.53-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_core-0.1.53.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.53-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
Publish Date: 2025-12-23
URL: CVE-2025-68664
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.0%
CVSS 3 Score Details (9.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Origin: GHSA-c67j-w6g6-q2cm
Release Date: 2025-12-23
Fix Resolution (langchain-core): 0.3.81
Direct dependency fix Resolution (langchain): 0.2.6
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2025-65106
Vulnerable Library - langchain_core-0.1.53-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/6a/10/285fa149ce95300d91ea0bb124eec28889e5ebbcb59434d1fe2f31098d72/langchain_core-0.1.53-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_core-0.1.53.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.53-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.
Publish Date: 2025-11-21
URL: CVE-2025-65106
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.1%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Origin: GHSA-6qv9-48xg-fc7f
Release Date: 2025-11-20
Fix Resolution (langchain-core): 0.3.80
Direct dependency fix Resolution (langchain): 0.2.6
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2024-3095
Vulnerable Library - langchain_community-0.0.38-py3-none-any.whl
Community contributed LangChain integrations.
Library home page: https://files.pythonhosted.org/packages/1b/d3/1f4d1941ae5a627299c8ea052847b99ad6674b97b699d8a08fc4faf25d3e/langchain_community-0.0.38-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_community-0.0.38.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_community-0.0.38-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet addresses, allowing it to reach local addresses. This flaw enables attackers to execute port scans, access local services, and in some scenarios, read instance metadata from cloud environments. The vulnerability is particularly concerning as it can be exploited to abuse the Web Explorer server as a proxy for web attacks on third parties and interact with servers in the local network, including reading their response data. This could potentially lead to arbitrary code execution, depending on the nature of the local services. The vulnerability is limited to GET requests, as POST requests are not possible, but the impact on confidentiality, integrity, and availability is significant due to the potential for stolen credentials and state-changing interactions with internal APIs.
Publish Date: 2024-06-06
URL: CVE-2024-3095
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.2%
CVSS 3 Score Details (7.7)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Origin: GHSA-q25c-c977-4cmh
Release Date: 2024-06-06
Fix Resolution (langchain-community): 0.2.9
Direct dependency fix Resolution (langchain): 0.2.0
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2025-6984
Vulnerable Library - langchain_community-0.0.38-py3-none-any.whl
Community contributed LangChain integrations.
Library home page: https://files.pythonhosted.org/packages/1b/d3/1f4d1941ae5a627299c8ea052847b99ad6674b97b699d8a08fc4faf25d3e/langchain_community-0.0.38-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_community-0.0.38.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_community-0.0.38-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd.
Publish Date: 2025-09-04
URL: CVE-2025-6984
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.0%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
Suggested Fix
Type: Upgrade version
Release Date: 2025-09-04
Fix Resolution (langchain-community): 0.3.27
Direct dependency fix Resolution (langchain): 0.2.0
⛑️ Automatic Remediation will be attempted for this issue.
CVE-2025-67221
Vulnerable Library - orjson-3.11.5-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/orjson-3.11.5.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- langsmith-0.1.147-py3-none-any.whl
- ❌ orjson-3.11.5-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (Vulnerable Library)
- langsmith-0.1.147-py3-none-any.whl
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
Publish Date: 2026-01-22
URL: CVE-2025-67221
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.1%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
Suggested Fix
Type: Upgrade version
Release Date: 2026-01-22
Fix Resolution: orjson - 3.11.6
CVE-2026-26013
Vulnerable Library - langchain_core-0.1.53-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/6a/10/285fa149ce95300d91ea0bb124eec28889e5ebbcb59434d1fe2f31098d72/langchain_core-0.1.53-py3-none-any.whl
Path to dependency file: /langchain/requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260219120409_AEEMWL/python_IKDEBG/202602191208361/env/lib/python3.9/site-packages/langchain_core-0.1.53.dist-info
Dependency Hierarchy:
- langchain-0.1.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.53-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: c2a0de4212c13487918a46a2935ca84031dd91aa
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values without validation when computing token counts for vision-enabled models. This allows attackers to trigger Server-Side Request Forgery (SSRF) attacks by providing malicious image URLs in user input. This vulnerability is fixed in 1.2.11.
Publish Date: 2026-02-10
URL: CVE-2026-26013
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.0%
CVSS 3 Score Details (3.7)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
Suggested Fix
Type: Upgrade version
Release Date: 2026-02-10
Fix Resolution (langchain-core): 1.2.11
Direct dependency fix Resolution (langchain): 0.2.6
⛑️ Automatic Remediation will be attempted for this issue.
⛑️Automatic Remediation will be attempted for this issue.