Skip to content

PatchFirst · Latest vulnerabilities

langchain vulnerabilities · Page 2

Vulnerabilities published for langchain in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 23

CVE-2023-34541
Critical · CVSS 9.8EPSS 0.94%Fix available
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
langchain Python
- Update to 0.0.247
Published June 20, 2023Updated December 9, 2024
Source advisory 1 ↗Source advisory 2 ↗
CVE-2023-34540
Critical · CVSS 9.8EPSS 1.68%Fix available
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available.
langchain Python
- Update to 0.0.225
Published June 14, 2023Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2023-29374
Critical · CVSS 9.8EPSS 39.65%Fix available
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
langchain langchain Python
- Update to 0.0.132
Published April 5, 2023Updated February 12, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →