LangChain Support & Health

Security

Known Vulnerabilities

10 active CVEs reported via OSV.dev

GHSA-2qmj-7962-cjq8 CVSS_V3

langchain arbitrary code execution vulnerability

Published: 2023-07-03 Fixed in: 0.0.247

GHSA-3644-q5cj-c5c7 CVSS_V3

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

Published: 2026-05-13 Fixed in: 0.8.0

GHSA-3hjh-jh2h-vrg6 CVSS_V3

Denial of service in langchain-community

Published: 2024-06-06 Fixed in: 0.2.5

GHSA-45pg-36p6-83v9 CVSS_V3

Langchain SQL Injection vulnerability

Published: 2024-10-29 Fixed in: 0.2.19

GHSA-57fc-8q82-gfp3 CVSS_V3

langchain vulnerable to arbitrary code execution

Published: 2023-07-06 Fixed in: 0.0.236

GHSA-655w-fm8m-m478 CVSS_V3

LangChain Server Side Request Forgery vulnerability

Published: 2023-10-19 Fixed in: 0.0.317

GHSA-6643-h7h5-x9wh CVSS_V3

Langchain vulnerable to arbitrary code execution

Published: 2023-06-20 Fixed in: 0.0.247

GHSA-6h8p-4hx9-w66c CVSS_V3

Langchain Server-Side Request Forgery vulnerability

Published: 2023-10-21 Fixed in: 0.0.329

GHSA-7gfq-f96f-g85j CVSS_V3

langchain vulnerable to arbitrary code execution

Published: 2023-08-22 Fixed in: 0.0.312

GHSA-7q94-qpjr-xpgm CVSS_V3

langchain SQL Injection vulnerability

Published: 2023-07-06 Fixed in: 0.0.247