gcdRadar
tags/Stacks and products

langchain

0 live · 40 on record · last incident 15 days ago

Dec ’25records per month, by first reportNov ’26

Records40

  1. closed
    LangChain family Poisoned Skills: Propagating Jailbreaks Through Agent Markdown Files

    Research · since 30 Oct 2026

    AI
  2. closed8.7
    n8n CVE-2026-119408: n8n remote code execution via LangChain Code nodes

    Patch now · Disclosed · Patched · since 30 Oct 2026 · CVE-2026-119408

    AI
  3. closed2.3
    LangChain family LangChain Redis Package Filter Injection Vulnerability

    Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-105799

    AI
  4. closed7.7
    LangChain family CVE-2026-55253: LangChain MongoDB integrations vulnerable to query injection

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-55253

    AI
  5. closed8.6
    LangChain family CVE-2026-72848: LangChain SitemapLoader vulnerable to unrestricted sitemap scraping

    Patch now · Disclosed · since 20 Aug 2026 · CVE-2026-72848

    AI
  6. closed5.1
    LangChain family CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders

    Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-55443

    AI
  7. closed3.1
    LangChain family LangChain langchain-openai TOCTOU DNS rebinding vulnerability

    Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41488

    AI
  8. closed6.5
    LangChain family LangChain URL validation SSRF vulnerability in HTMLHeaderTextSplitter

    Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41481

    AI
  9. closed8.6
    Langchain-Chatchat CVE-2026-30617: Remote Code Execution in LangChain-ChatChat MCP Server

    Patch now · Disclosed · since 15 Apr 2026 · CVE-2026-30617

    AI
  10. closed8.5
    LangChain family CVE-2026-25750: URL parameter injection in Langchain Helm Charts exposing auth tokens

    Patch now · Disclosed · since 4 Mar 2026 · CVE-2026-25750

    AI
  11. closed4.1
    LangChain family CVE-2026-27795: LangChain Community RecursiveUrlLoader SSRF Bypass

    Patch now · Disclosed · since 25 Feb 2026 · CVE-2026-27795

    AI
  12. closed4.1
    LangChain family CVE-2026-26019: LangChain Community RecursiveUrlLoader SSRF Bypass

    Patch now · Disclosed · since 11 Feb 2026 · CVE-2026-26019

    AI
  13. closed3.7
    LangChain family CVE-2026-26013: LangChain ChatOpenAI SSRF via Image Token Counting

    Patch now · Disclosed · since 11 Feb 2026 · updated 11 Feb 2026 · CVE-2026-26013

    AI
  14. closed8.6
    LangChain family LangChain JS serialization injection vulnerability CVE-2025-68665

    Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-68665

    AI
  15. closed9.3
    LangChain family LangChain serialization injection vulnerability CVE-2025-68664

    Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-68664

    AI
  16. closed8.3
    LangChain family CVE-2025-65106: LangChain Vulnerable to Template Injection via Attribute Access

    Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-65106

    AI
  17. closed7.3
    LangChain family CVE-2025-8709: SQL injection vulnerability in LangGraph SQLite store

    Patch now · Disclosed · since 26 Oct 2025 · CVE-2025-8709

    AI
  18. closed9.8
    LangChain-ChatGLM-Webui CVE-2025-45150: Insecure permissions in LangChain-ChatGLM-Webui

    Patch now · Disclosed · since 1 Aug 2025 · CVE-2025-45150

    AI
  19. closed9.8
    LangChain family Indirect Prompt Injection in LangChain GmailToolkit

    Patch now · Disclosed · since 29 Jul 2025 · CVE-2025-46059

    AI
  20. closed8.4
    LangChain family CVE-2025-2828: LangChain Community RequestsToolkit SSRF Vulnerability

    Patch now · Disclosed · since 23 Jun 2025 · CVE-2025-2828

    AI
  21. closed6.9
    LangChain family CVE-2024-7774: LangChain Path Traversal Vulnerability

    Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-7774

    AI
  22. closed9.8
    LangChain family CVE-2024-46946: LangChain Experimental Eval Injection vulnerability

    Patch now · Disclosed · since 19 Sep 2024 · CVE-2024-46946

    AI
  23. closed8.4
    LangChain family CVE-2024-5998: LangChain pickle deserialization of untrusted data

    Patch now · Disclosed · since 17 Sep 2024 · CVE-2024-5998

    AI
  24. closed7.8
    LangChain family CVE-2024-38459: LangChain Experimental Python REPL code execution

    Patch now · Disclosed · since 16 Jun 2024 · CVE-2024-38459

    AI
  25. closed4.8
    LangChain family CVE-2024-3095: SSRF in langchain-community Web Research Retriever

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3095

    AI
  26. closed5.9
    LangChain family CVE-2024-1455: LangChain XMLOutputParser vulnerable to XXE

    Patch now · Disclosed · since 26 Mar 2024 · CVE-2024-1455

    AI
  27. closed8.1
    LangChain family CVE-2024-28088: LangChain directory traversal vulnerability

    Patch now · Disclosed · since 4 Mar 2024 · CVE-2024-28088

    AI
  28. closed6.3
    LangChain family Server-side request forgery in LangChain TFIDFRetriever

    Patch now · Disclosed · since 1 Mar 2024 · CVE-2024-2057

    AI
  29. closed9.8
    LangChain family CVE-2023-32785: Langchain SQL Injection vulnerability

    Patch now · Disclosed · since 21 Oct 2023 · CVE-2023-32785

    AI
  30. closed8.8
    LangChain family CVE-2023-46229: LangChain Server Side Request Forgery vulnerability

    Patch now · Disclosed · since 19 Oct 2023 · CVE-2023-46229

    AI
  31. closed9.8
    LangChain family CVE-2023-44467: LangChain Experimental arbitrary code execution

    Patch now · Disclosed · since 9 Oct 2023 · CVE-2023-44467

    AI
  32. closed9.8
    LangChain family CVE-2023-39631: LangChain arbitrary code execution via numexpr

    Patch now · Disclosed · since 1 Sep 2023 · CVE-2023-39631

    AI
  33. closed9.8
    LangChain family CVE-2023-36281: LangChain arbitrary code execution vulnerability

    Patch now · Disclosed · since 22 Aug 2023 · CVE-2023-36281

    AI
  34. closed9.8
    LangChain family CVE-2023-38860: LangChain arbitrary code execution vulnerability

    Patch now · Disclosed · since 15 Aug 2023 · CVE-2023-38860

    AI
  35. closed9.8
    LangChain family CVE-2023-36188: Langchain vulnerable to arbitrary code execution

    Patch now · Disclosed · since 6 Jul 2023 · CVE-2023-36188

    AI
  36. closed8.7
    LangChain family CVE-2023-36189: Langchain SQL Injection vulnerability

    Patch now · Disclosed · since 6 Jul 2023 · CVE-2023-36189

    AI
  37. closed9.8
    LangChain family CVE-2023-36258: Langchain arbitrary code execution vulnerability

    Patch now · Disclosed · since 3 Jul 2023 · CVE-2023-36258

    AI
  38. closed9.8
    LangChain family CVE-2023-34541: Langchain vulnerable to arbitrary code execution

    Patch now · Disclosed · since 20 Jun 2023 · CVE-2023-34541

    AI
  39. closed9.8
    LangChain family CVE-2023-29374: LangChain code injection via LLMMathChain

    Patch now · Disclosed · since 5 Apr 2023 · CVE-2023-29374

    AI
  40. closed
    ChatGPT LLM Application Frameworks Allow Remote Code Execution via Prompting

    Research · since 26 Mar 2023 · updated 31 Mar 2023

    AI