Vendor
langchain-ai
55 known vulnerabilities.
Products
langchain-ai/langchain 12
langgraph 11
langchain 8
langsmith-sdk 5
langchainjs 5
langgraph-api 3
langgraphjs 2
langgraph-checkpoint-sqlite 2
langgraph-checkpoint-postgres 2
langchain-ai/langchainjs 2
helm 1
langchain-ai 1
langchain-sdk 1
langchain-openai 1
langchain-anthropic 1
langchain-mongodb 1
langgraph-checkpoint-mongodb 1
langgraph-store-mongodb 1
langraph-checkpoint 1
langgraph-sdk 1
langchain-text-splitters 1
langgraph-checkpoint 1
langchain-community 1
2 results · Clear filters · Feed
-
High 7.5CVE-2026-34070 Public exploit
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal…
-
High 7.3CVE-2025-67644 Public exploit
LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method
LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and below are vulnerable to SQL injection through the checkpoint implementation. Checkpoint allows attackers…