Skip to content
OpenAdvisories

Package · PyPI

langchain-exa

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    LangChain <= 0.3.1 MRKLOutputParser ReDoS

    LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular e…