Homepage

@n8n/n8n-nodes-langchain@1.103.1 vulnerabilities

  • latest version

    1.112.2

  • latest non vulnerable version

    1.112.2

  • first published

    1 years ago

  • latest version published

    21 hours ago

  • licenses detected

  • View n8n-nodes-langchain package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @n8n/n8n-nodes-langchain package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Arbitrary File Upload

    @n8n/n8n-nodes-langchain is a Banner image

    Affected versions of this package are vulnerable to Arbitrary File Upload via the ChatTrigger component. An attacker can execute arbitrary code by uploading a crafted HTML file.

    How to fix Arbitrary File Upload?

    Upgrade @n8n/n8n-nodes-langchain to version 1.106.0 or higher.

    >=1.36.4 <1.106.0
    • M
    Cross-site Scripting (XSS)

    @n8n/n8n-nodes-langchain is a Banner image

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the initialMessages parameter in the LangChain Chat Trigger node. An attacker can execute arbitrary JavaScript in the browser of users who visit a crafted public chat URL by injecting malicious payloads. This can lead to theft of cookies or other sensitive data, or be used for phishing attacks.

    How to fix Cross-site Scripting (XSS)?

    Upgrade @n8n/n8n-nodes-langchain to version 1.106.0 or higher.

    >=1.36.4 <1.106.0
    Go back to all versions of this package