langchain-ai

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

langchain-ai records in CISA KEV

No langchain-ai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Langchain.js · all components

TI-2025-42158 CVE-2025-68665 · GHSA-r399-636x-v7f6

HIGH 78

LangChain is a framework for building LLM-powered applications.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00793 Published 2025-12-23 Partial fix · 1.1.8, 0.3.80 +2 CWE-502

TI-2024-07207 CVE-2024-7774 · GHSA-hc5w-c9f8-9cc4

HIGH 72

A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00557 Published 2024-10-29 Fixed in 0.2.19 CWE-29