langchain-ai/langchain
- Software type
- Other
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/24/2026, langchain-ai/langchain recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of langchain-ai/langchain and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-8709SQL Injection in langchain-ai/langchainCVE-2025-6985XXE Vulnerability in langchain-ai/langchainCVE-2025-6984Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchainCVE-2025-2828SSRF Vulnerability in RequestsToolkit in langchain-ai/langchainCVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-8709SQL Injection in langchain-ai/langchain | Exploitation statusActively exploited | FixNo | Published10/26/2025 | SeverityHigh |
CVE-2025-6985XXE Vulnerability in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published10/06/2025 | SeverityHigh |
CVE-2025-6984Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain | Exploitation statusActively exploited | FixNo | Published09/04/2025 | SeverityHigh |
CVE-2025-2828SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published06/23/2025 | SeverityHigh |
CVE-2024-10940Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published03/20/2025 | SeverityMedium |
CVE-2024-8309SQL Injection in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published10/29/2024 | SeverityMedium |
CVE-2024-5998Deserialization of Untrusted Data in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published09/17/2024 | SeverityMedium |
CVE-2024-2965Denial-of-Service in LangChain SitemapLoader in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published06/06/2024 | SeverityMedium |
CVE-2024-3095SSRF in Langchain Web Research Retriever in langchain-ai/langchain | Exploitation statusActively exploited | FixNo | Published06/06/2024 | SeverityMedium |
CVE-2024-3571Path Traversal in langchain-ai/langchain | Exploitation statusActively exploited | FixYes | Published04/16/2024 | SeverityMedium |
12 Results | Page 1 of 2