Skip to content
OpenAdvisories

Package · PyPI

langchain-exa

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2024-58340

    LangChain <= 0.3.1 MRKLOutputParser ReDoS

    LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular e…

    langchain-ai langchain langchain-exa PyPI
  • Low 3.7
    CVE-2024-0243

    Server-side Request Forgery In Recursive URL Loader

    With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text ) docs = loader.load() ``` An attacker in …

    langchain-ai langchain-ai/langchain langchain langchain-exa PyPI