repository icon
langchain-ai / langchain Project repository

🦜🔗 Build context-aware reasoning applications

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN18 DAYS

FIX

WITHIN77 DAYS

OS Command Injection In scripts/release_branch.py Allows Arbitrary Code Executio...
ashmitsh4rma
spam
Arbitrary Code Execution in LangGraph create_react_agent Function
jeremycfwong
not applicable
knowledge poisoning attacks to LangChain's RAG
gongyuyang-alt
pending
Vulnerability Report: Groq API Key Exposure in langsmith-sdk
bhartisaurav
pending
SSRF Vulnerability in RequestsToolkit in langchain-community in langchain-ai/lan...
ano251
High
•CVE-2025-2828
SSRF Vulnerability in RequestsToolkit in langchain-community
ano251
self closed
Leakage of Hidden Elements via Prompt Injection Against LLM Browser Agents
melonattacker
informative
Medium
By default, LangGraph (agentic library by LangChain) exposes an error object (th...
m-kemarskyi
pending
Snowflake Cortex LLM SQL injection
joned91
pending
xxxx
marklee131
pending
The create_sql_agent function can trigger an SQL injection vulnerability.
bacmiao
informative
Critical
XXE in EverNoteLoader in langchain-ai/langchain
cyjhhh
duplicate
High
XXE in UnstructuredXMLLoader and EverNoteLoader
cyjhhh
duplicate
Medium
Rce attack exploiting GraphCypherQAChain in langchain
samr301
duplicate
Critical
Read from host file system via ImagePromptTemplate in langchain-core
baskaryan
Medium
•$125•CVE-2024-10940
DoS in WebResearchRetriever
agentsec
informative
High
ReDoS(Regular expression Denial of Service) on MRKLOutputParser
life-team2024
informative
Medium
SQL injection with earliest_time parameter in TiDBChatMessageHistory Class
life-team2024
informative
Medium
Succeed to trigger Reverse Shell(RCE) via Prompt
life-team2024
not applicable
Lack of Input Validation in ContextSet Allows Unauthorized Data Access
jedisol24
not applicable
Bypass of RecursiveUrlLoader SSRF protection mechanisms ‘prevent_outside’ (SSRF+...
nnfrog
informative
Low
Bug Bounty Report: Improper Certificate Validation
past3l
spam
Read and write files with create_sql_agent
0gur1
informative
Critical
Introduce malicious json through load_prompt(".json") to cause arbitrary command...
trinity-syt-security
spam
Path traversal that leads to arbitrary file read
021w
not applicable
Blind Cypher Injection in the langchain_community using the Neo4jVector class
liadlevy
informative
Critical
Prompt injection in the GraphCypherQAChain class results in SQL injection, compl...
liadlevy
Medium
•$125•CVE-2024-8309
Path Traversal in BibtexLoder in langchain-community
021w
pending
pickle deserialization vulnerability
cn-panda
Medium
•$125•CVE-2024-5998
CVE-2024-27444(LangChain PALChain RCE) Bypass
cn-panda
duplicate
Critical
Arbitrary File Read Vulnerability using SSRF
evrenyal
informative
Medium
Arbitrary Code Execution: Bypass of Fixes for CVE-2023-36258 and CVE-2023-44467
satoki
not applicable
Exposure of WRITE_KEY in the code
noorhomaid
not applicable
Multiple default insecure data source loaders lead to xxe vulnerability
virusday
informative
Critical
HTML code injection
newb3ast
not applicable
langchain_experimental (aka LangChain Experimental) in LangChain before > 0.1.13...
yuligesec
duplicate
Critical
Denial-of-Service in LangChain SitemapLoader
dxan29a
Medium
•$125•CVE-2024-2965
IDOR leading to send feedback messages
mdakh404
not applicable
Server-Side Request Forgery (SSRF) in langchain-ai/langchain
supersuperbang
informative
High
SSRF in Langchain Web Research Retriever
ehtec
Medium
•$125•CVE-2024-3095
HTML Injection in [chat.langchain.com]
theo0k
not applicable
RCE & API token leakage via URI traversal
pinkdraconian
Low
•$20•CVE-2024-28088
Unrestricted SSRF when using requests tools
ehtec
not applicable
Billion laughs vulnerability that leads to DOS
0xanis
Medium
•$125•CVE-2024-1455
Prompt Injection leading to Arbitrary Code Execution
vvxhid
informative
Critical
Server Side Request Forgery (SSRF)
m0kr4n3
informative
High
Server-Side Request Forgery (SSRF)
m0kr4n3
Low
•$20•CVE-2024-0243
Command injection in PALChain function
ouxs-19
informative
Critical
Remote Code Execution due to Deserialization of Untrusted Pickle Files
ninjafit
informative
Critical
Local File Inclusion (LFI) to Remote Code Execution
ninjafit
Medium
•$125•CVE-2024-3571