Skip to content
OpenAdvisories

Package · npm

langchain

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-7774

    Path Traversal in langchain-ai/langchainjs

    A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The …

    langchain-ai langchain-ai/langchainjs langchain npm