PYSEC-2024-235

    Dashboard / Vulnerabilities / PYSEC-2024-235

    PYSEC-2024-235

    Published: 26 Feb 2024Last Modified: 7 Jul 2026

    Summary:

    Details: With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text ) docs = loader.load() ``` An attacker in control of the contents of `https://example.com` could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and the crawler would proceed to download that file as well even though `prevent_outside=True`. https://github.com/langchain-ai/langchain/blob/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22/libs/community/langchain_community/document_loaders/recursive_url_loader.py#L51-L51 Resolved in https://github.com/langchain-ai/langchain/pull/15559

    References: https://huntr.com/bounties/370904e7-10ac-40a4-a8d4-e2d16e1ca861, https://github.com/langchain-ai/langchain/commit/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22, https://github.com/langchain-ai/langchain/pull/15559

    Affected packages

    Package

    Name: langchain-exa

    Purl: pkg:pypi/langchain-exa

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22

    Affected versions

    0.0.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    PYSEC-2024-235 | CVE-DB