@n8n/n8n-nodes-langchain

Licenses: Unknown

Published: 2 years ago Last updated: 2 days ago Latest version: 2.36.5 Latest non-vulnerable version: 2.37.2

License

Known vulnerabilities in the @n8n/n8n-nodes-langchain package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Incorrect Authorization	<1.122.46>=2.0.0-rc.0 <2.31.3>=2.32.0 <2.32.1
M Server-side Request Forgery (SSRF)	<2.31.3>=2.32.0 <2.32.1
M Incorrect Authorization	>=2.27.0 <2.29.7>=2.30.0 <2.30.1
M Cross-site Scripting (XSS)	<1.122.19>=2.0.0-rc.0 <2.13.1<2.14.1
M User Impersonation	>=2.7.0 <2.25.2>=2.26.0 <2.26.1
H Cross-site Scripting (XSS)	<1.122.39>=2.0.0-rc.0 <2.25.2>=2.26.0 <2.26.1
M Cross-site Scripting (XSS)	<1.122.20>=2.13.0 <2.13.1>=2.14.0 <2.14.1
M Missing Authentication for Critical Function	<1.122.16>=2.0.0 <2.9.1>=2.10.0 <2.10.1
M Improper Neutralization of Input Used for LLM Prompting	<2.10.0
H Cross-site Scripting (XSS)	<1.122.16>=2.0.0 <2.9.1>=2.10.0 <2.10.1
C Improper Validation of Specified Type of Input	>=1.65.0 <1.120.0
H Arbitrary File Upload	>=1.36.4 <1.106.0
M Cross-site Scripting (XSS)	>=1.36.4 <1.106.0

444 VERSIONS IN TOTAL See all versions