← Back

Langchain

langchain

49 CVEs • 13 products

Products (13)

Click to collapse
Toggle
Langchain
langchain
29 CVEs
Langchain Experimental
langchain_experimental
5 CVEs
Langchain Core
langchain_core
4 CVEs
Langchain.js
langchain.js
2 CVEs
Langchain Community
langchain_community
2 CVEs
Langsmith
langsmith
2 CVEs
Langchain/core
langchain/core
1 CVE
Langgraph Checkpoint Sqlite
langgraph-checkpoint-sqlite
1 CVE
Langgraph
langgraph
1 CVE
Langchain Text Splitters
langchain-text-splitters
1 CVE
Langchain Openai
langchain-openai
1 CVE
Langgraph Checkpoint
langgraph-checkpoint
1 CVE
Langgraph Sdk
langgraph-sdk
1 CVE

CVEs (49)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-38896
1Langchain
1Langchain
Jun 17, 2026
Aug 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
CVE-2023-38860
1Langchain
1Langchain
Jun 17, 2026
Aug 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
CVE-2023-36095
1Langchain
1Langchain
Jul 9, 2026
Aug 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
CVE-2023-36189
1Langchain
1Langchain
Jun 17, 2026
Jul 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
CVE-2023-36188
1Langchain
1Langchain
Jun 17, 2026
Jul 6, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
CVE-2023-36258
1Langchain
1Langchain
Jun 17, 2026
Jul 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.
CVE-2023-34541
1Langchain
1Langchain
Jun 17, 2026
Jun 20, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
CVE-2023-34540
1Langchain
1Langchain
Jun 17, 2026
Jun 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code vi...Show more
Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available.Show less
CVE-2023-29374
1Langchain
1Langchain
Jun 17, 2026
Apr 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.