langchain-core@0.0.10 vulnerabilities

langchain-core is a Building applications with LLMs through composability

Affected versions of this package are vulnerable to Improper Restriction of XML External Entity Reference due to the XMLOutputParser using the etree module from the XML parser in the standard python library, which is known to have vulnerabilities. This issue primarily affects users that combine an LLM (or agent) with the XMLOutputParser and expose the component via an endpoint on a web-service. A malicious party could attempt to manipulate the LLM to produce a malicious payload for the parser, compromising the availability of the service.

Note:

This is only exploitable if

1. XMLOutputParser is used

2. Malicious input is passed into the XMLOutputParser either directly or by trying to manipulate an LLM to do so on the user's behalf

3. The component is exposed via a web-service.

Upgrade langchain-core to version 0.1.34 or higher.

langchain-core is a Building applications with LLMs through composability

Affected versions of this package are vulnerable to Path Traversal due to improper validation of user-supplied input in the load_chain call. An attacker can achieve remote code execution or disclose sensitive information by manipulating the path parameter to traverse directories and load configurations or execute code not intended by the application.

Notes:

1. This is only exploitable if the attacker can control the final part of the path parameter.

2. llm_bash_chain is an experimental feature.

Upgrade langchain-core to version 0.1.31 or higher.

langchain-core is a Building applications with LLMs through composability

Affected versions of this package are vulnerable to Server-Side Request Forgery (SSRF) in document_loaders/recursive_url_loader.py. An attacker in control of the contents of a specified URL could place a malicious HTML file there with links to completely different domains, and the crawler would proceed to issue GET requests from it, even though it is configured to prevent requests from outside sources. This is a bypass for the previously reported CVE-2023-46229.

Upgrade langchain-core to version 0.1.7 or higher.