Skip to content
OpenAdvisories

Package · PyPI

langchain-nvidia-ai-endpoints

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-g28h-2cmm-rj9x

    langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

    ## Summary `langchain-nvidia-ai-endpoints` versions before 1.4.2 accepted local filesystem paths as image inputs for Vision Language Model (VLM) requests. If an application passed attacker-controlled image input to `ChatNVIDIA` or VLM reranking APIs, an attac…

    langchain-nvidia-ai-endpoints PyPI