langchain-ai

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

langchain-ai records in CISA KEV

No langchain-ai vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Langchain 28 records HIGH Langchain-experimental 4 records HIGH Langchain Core 4 records HIGH Langchain.js 2 records HIGH Langchain Community 2 records LOW Langsmith 2 records HIGH Langchain-openai 1 record LOW Langchain-text-splitters 1 record LOW

Records

2 records in Langchain Community · all components

TI-2026-22149 CVE-2026-27795 · GHSA-mphv-75cg-56wg

LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

LOW 32

LangChain is a framework for building LLM-powered applications.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00247 Published 2026-02-25 Partial fix · 1.1.18 CWE-918

TI-2026-21033 CVE-2026-26019 · GHSA-gf3v-fwqg-4vh7

@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation

LOW 19

LangChain is a framework for building LLM-powered applications.

CVSS 3.1MEDIUM 4.1 Network Low privileges User interaction EPSS 0.00394 Published 2026-02-11 Partial fix · 1.1.14 CWE-918

Open these records in search →