Skip to content
OpenAdvisories

Package · PyPI

langchain-core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-26013

    LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

    LangChain is a framework for building agents and LLM-powered applications. Prior to 1.2.11, the ChatOpenAI.get_num_tokens_from_messages() method fetches arbitrary image_url values without validation when computing token counts for vision-enabled models. This …

    langchain-ai langchain open-webui langchain-core Wolfi PyPI