Skip to content
OpenAdvisories

Package · PyPI

langchain-community

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6984

    Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

    The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without d…

    langchain-ai langchain-ai/langchain open-webui open-webui-compat Wolfi PyPI
  • High 8.4
    CVE-2025-2828 EPSS 21%

    SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

    A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.RequestsToolkit) in langchain-ai/langchain version 0.0.27. This vul…

    langchain-ai langchain-ai/langchain langchain-community PyPI