Skip to content
OpenAdvisories

Package · PyPI

langchain-text-splitters

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2026-41481

    LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

    LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.split_text_from_url() validated the initial URL using validate_safe_url() but then performed the fetch with requests.get…

    langchain-ai langchain-text-splitters open-webui langchain-text-splitters Wolfi PyPI
  • High 7.5
    CVE-2025-6985

    XXE Vulnerability in langchain-ai/langchain

    The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed u…

    langchain-ai langchain-ai/langchain open-webui open-webui-compat Wolfi PyPI