Skip to content
OpenAdvisories

Package · PyPI

langchain-text-splitters

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-6985

    XXE Vulnerability in langchain-ai/langchain

    The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed u…

    langchain-ai langchain-ai/langchain open-webui open-webui-compat Wolfi PyPI