Read the docs

langchain-ai

Records76All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

langchain-ai records in CISA KEV

No langchain-ai vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Langchain 28 records HIGH Langchain-experimental 4 records HIGH Langchain Core 4 records HIGH Langchain.js 2 records HIGH Langchain Community 2 records LOW Langsmith 2 records HIGH Langchain-openai 1 record LOW Langchain-text-splitters 1 record LOW

Records

4 records in Langchain-experimental · all components

TI-2024-18267 CVE-2024-27444 · GHSA-v8vj-cv27-hjv8

langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an…

Priority MEDIUM 50

langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00773 Published 2024-02-26 Fixed in 0.0.52 CWE-749
TI-2024-14269 CVE-2024-21513 · GHSA-cgcg-p68q-3w7v

Code injection in langchain-experimental

Priority MEDIUM 43

Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01893 Published 2024-07-15 Fixed in 0.0.21 CWE-94
Open these records in search →