AI Threat Alert

LangChain Community Vulnerabilities

pip LLM Frameworks

49

Risk Score

6

Total CVEs

2

Critical

pip

Ecosystem

May 14, 2026

Last CVE

67%

Patch Rate

48d

Avg Time to Patch

136,905 stars 22,646 forks 582 issues 1,201 dependents Last push May 17, 2026

OpenSSF Scorecard 6.4/10

Known Vulnerabilities (6 total, page 1 of 1)

Severity CVE ID Summary CVSS Published

HIGH CVE-2026-45401 open-webui: SSRF redirect bypass exposes internal services 8.5 May 14, 2026 HIGH CVE-2026-44843 LangChain: deserialization poisons LLM chat history 8.2 May 8, 2026 MEDIUM CVE-2024-2965 langchain-community: DoS via recursive sitemap loop 4.2 Jun 6, 2024 HIGH CVE-2025-6984 EverNoteLoader: XXE exposes host files in LangChain 7.5 Sep 4, 2025 CRITICAL CVE-2025-2828 LangChain RequestsToolkit: SSRF exposes cloud metadata 10.0 Jun 23, 2025 CRITICAL CVE-2024-8309 LangChain GraphCypher: prompt injection enables DB wipe 9.8 Oct 29, 2024

Monitor LangChain Community in your stack

Get instant alerts when new vulnerabilities affect LangChain Community. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring