Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
Deserialization of Untrusted Data
CVE-2024-5998
Affects
langchain-community
| Versions
[,0.2.10)
H
Server-side Request Forgery (SSRF)
CVE-2025-2828
Affects
langchain-community
| Versions
[,0.0.28)
L
SQL Injection
CVE-2024-8309
Affects
langchain-community
| Versions
[0.2.5,0.2.19)
M
Uncontrolled Resource Consumption ('Resource Exhaustion')
CVE-2024-2965
Affects
langchain-community
| Versions
[,0.2.5)
M
Server-Side Request Forgery (SSRF)
CVE-2024-2057
Affects
langchain-community
| Versions
[,0.0.27)
H
Deserialization of Untrusted Data
CVE-2026-44843
Affects
langchain-core
| Versions
[,0.3.85)
[1.0.0a1,1.3.3)
M
Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-40087
Affects
langchain-core
| Versions
[,0.3.84)
[0.4.0.dev0, 1.2.28)
H
Directory Traversal
CVE-2026-34070
Affects
langchain-core
| Versions
[,0.3.86)
[0.4.0.dev0,1.2.22)
C
Deserialization of Untrusted Data
CVE-2025-68664
Affects
langchain-core
| Versions
[,0.3.81)
[0.4.0.dev0,1.2.5)
H
Template Injection
CVE-2025-65106
Affects
langchain-core
| Versions
[,0.3.80)
[0.4.0.dev0, 1.0.7)
H
Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2024-10940
Affects
langchain-core
| Versions
[,0.1.53)
[0.2.0rc1,0.2.43)
[0.3.0.dev0,0.3.15)
M
XML External Entity (XXE) Injection
CVE-2024-1455
Affects
langchain-core
| Versions
[,0.1.34)
C
Path Traversal
CVE-2024-28088
Affects
langchain-core
| Versions
[,0.1.31)
L
Server-Side Request Forgery (SSRF)
CVE-2024-0243
Affects
langchain-core
| Versions
[,0.1.7)
M
Eval Injection
CVE-2024-46946
Affects
langchain-experimental
| Versions
[0.0.58,0.3.1)
H
Arbitrary Code Execution
CVE-2024-21513
Affects
langchain-experimental
| Versions
[0.0.15, 0.0.21)
H
Improper Access Control
CVE-2024-38459
Affects
langchain-experimental
| Versions
[,0.0.61)
C
Arbitrary Code Execution
CVE-2024-27444
Affects
langchain-experimental
| Versions
[,0.0.52)
C
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-44467
Affects
langchain-experimental
| Versions
[,0.0.24)
L
Server-side Request Forgery (SSRF)
CVE-2026-41488
Affects
langchain-openai
| Versions
[,1.1.14)
M
Server-side Request Forgery (SSRF)
CVE-2026-26013
Affects
langchain-openai
| Versions
[,1.1.9)
M
Server-side Request Forgery (SSRF)
CVE-2026-41481
Affects
langchain-text-splitters
| Versions
[,1.1.2)
H
XML External Entity (XXE) Injection
CVE-2025-6985
Affects
langchain-text-splitters
| Versions
[,0.3.9)