İçeriğe atla
Noroxi

LangChain kayıtları

langchain üreticisine ait 49 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
15
Düzeltme kaydı olan
%95,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

49 kayıt
  • CVE-2023-29374
    51Planlayın

    In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec met

    KritikCVSS 9,8İstismar yokEPSS %40

    langchain · langchain4 Nis 2023

  • CVE-2023-46229
    48Planlayın

    LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an

    YüksekCVSS 8,8Kavram kanıtıEPSS %45

    langchain · langchain19 Eki 2023

  • CVE-2025-2828
    46Planlayın

    SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    KritikCVSS 10,0İstismar yokEPSS %21

    langchain · langchain23 Haz 2025

  • CVE-2025-68664
    45Planlayın

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    YüksekCVSS 8,2Kavram kanıtıEPSS %43

    langchain · langchain core23 Ara 2025

  • CVE-2024-8309
    43Planlayın

    SQL Injection in langchain-ai/langchain

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    langchain · langchain29 Eki 2024

  • CVE-2023-36281
    40Planlayın

    An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    langchain · langchain22 Ağu 2023

  • CVE-2023-36188
    40Planlayın

    An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.

    KritikCVSS 9,8İstismar yokEPSS %2

    langchain · langchain6 Tem 2023

  • CVE-2023-38896
    40Planlayın

    An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and fr

    KritikCVSS 9,8İstismar yokEPSS %2

    langchain · langchain15 Ağu 2023

  • CVE-2023-34540
    40Planlayın

    Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIR

    KritikCVSS 9,8İstismar yokEPSS %2

    langchain · langchain14 Haz 2023

  • CVE-2023-39631
    39İzleyin

    An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr libr

    KritikCVSS 9,8İstismar yokEPSS %2

    langchain · langchain1 Eyl 2023

  • CVE-2023-39659
    39İzleyin

    An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the Pytho

    KritikCVSS 9,8İstismar yokEPSS %2

    langchain · langchain15 Ağu 2023

  • CVE-2023-38860
    39İzleyin

    An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain15 Ağu 2023

  • CVE-2024-46946
    39İzleyin

    langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sy

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain-experimental19 Eyl 2024

  • CVE-2023-36095
    39İzleyin

    An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affec

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain4 Ağu 2023

  • CVE-2023-36258
    39İzleyin

    An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be u

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain3 Tem 2023

  • CVE-2023-44467
    39İzleyin

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and exec

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain experimental9 Eki 2023

  • CVE-2023-34541
    39İzleyin

    Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain20 Haz 2023

  • CVE-2024-27444
    39İzleyin

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execut

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain-experimental26 Şub 2024

  • CVE-2024-2057
    39İzleyin

    LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery

    KritikCVSS 9,8İstismar yokEPSS %1

    langchain · langchain1 Mar 2024

  • CVE-2026-40190
    39İzleyin

    LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

    KritikCVSS 9,8İstismar yokEPSS %0

    langchain · langsmith10 Nis 2026

  • CVE-2024-7042
    39İzleyin

    Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %0

    langchain · langchain29 Eki 2024

  • CVE-2024-3571
    36İzleyin

    Path Traversal in langchain-ai/langchain

    YüksekCVSS 8,8İstismar yokEPSS %2

    langchain · langchain15 Nis 2024

  • CVE-2025-68665
    36İzleyin

    LangChain serialization injection vulnerability enables secret extraction

    KritikCVSS 9,1İstismar yokEPSS %1

    langchain · langchain.js23 Ara 2025

  • CVE-2024-7774
    36İzleyin

    Path Traversal in langchain-ai/langchainjs

    KritikCVSS 9,1İstismar yokEPSS %1

    langchain · langchain.js29 Eki 2024

  • CVE-2026-48776
    36İzleyin

    LangGraph SDK has unsafe URL path construction

    KritikCVSS 9,1İstismar yokEPSS %0

    langchain · langgraph-sdk17 Haz 2026