Login Request a demo
LA
Product
langchain-ai/langchain
by langchain-ai · last CVE Oct 26, 2025
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 4Medium 1Low 0
Severity
All severities7Critical2High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add langchain-ai/langchain to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2828
10.0
21%
Jun 23
SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
Affected: before 0.0.28
CVE-2024-8309
9.8
14%
Oct 29
SQL Injection in langchain-ai/langchain
Affected: before 0.3.0
CVE-2024-5998
7.8
0%
Sep 17
Deserialization of Untrusted Data in langchain-ai/langchain
Affected: before 0.2.9
CVE-2025-6985
7.5
1%
Oct 6
XXE Vulnerability in langchain-ai/langchain
Affected: through latest
CVE-2025-6984
7.5
2%
Sep 4
Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain
Affected: through latest
CVE-2025-8709
7.3
0%
Oct 26
SQL Injection in langchain-ai/langchain
Affected: through latest
CVE-2024-10940
5.3
0%
Mar 20
Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain
Affected: before 0.3.15
Showing 7