Langchain

    Dashboard / Vendors

    Products: 12
    Vulnerabilities: 53
    Known Exploited: 0
    22
    Critical Level Threats
    20
    High Level Threats
    8
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-72848

    langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

    Last Modified: Aug 21, 2026
    Published: Aug 20, 2026

    CVE-2026-71433

    LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

    Last Modified: Aug 07, 2026
    Published: Aug 06, 2026

    CVE-2026-44843

    LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

    Last Modified: May 29, 2026
    Published: May 26, 2026

    CVE-2026-41488

    angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

    Last Modified: Apr 28, 2026
    Published: Apr 24, 2026

    CVE-2026-41481

    LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

    Last Modified: Apr 28, 2026
    Published: Apr 24, 2026
    Items Per Page