Vulnerable Library - langchain_google_genai-0.0.9-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /Pipfile,/tmp/ws-ua_20260825123021_OMDTGG/python_SCNTMZ/202608251230221/env/lib/python3.10/site-packages/protobuf-4.25.9.dist-info
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Vulnerabilities
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Partial details (17 vulnerabilities) are displayed below due to a content size limitation in GitHub. To view information on the remaining vulnerabilities, navigate to the Mend Application.
CVE-2025-68664
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
Publish Date: 2025-12-23
URL: CVE-2025-68664
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 43.415%
CVSS 3 Score Details (9.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-c67j-w6g6-q2cm
Release Date: 2025-12-23
Fix Resolution (langchain-core): 0.3.81
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
CVE-2026-0994
Vulnerable Library - protobuf-4.25.9-cp37-abi3-manylinux2014_x86_64.whl
No project description provided
Library home page: https://files.pythonhosted.org/packages/a8/5c/53f18822017b8bda6bd8bb4e02048e911fdc79a3dafdc83ab994fe922a84/protobuf-4.25.9-cp37-abi3-manylinux2014_x86_64.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /Pipfile,/tmp/ws-ua_20260825123021_OMDTGG/python_SCNTMZ/202608251230221/env/lib/python3.10/site-packages/protobuf-4.25.9.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- ❌ protobuf-4.25.9-cp37-abi3-manylinux2014_x86_64.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Publish Date: 2026-01-23
URL: CVE-2026-0994
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.688%
CVSS 3 Score Details (8.6)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-01-23
Fix Resolution: protobuf - 6.33.5,https://github.com/protocolbuffers/protobuf.git - v33.5,https://github.com/protocolbuffers/protobuf.git - v29.6,https://github.com/protocolbuffers/protobuf.git - v3.29.6-objectivec,https://github.com/protocolbuffers/protobuf.git - v5.29.6-cpp,https://github.com/protocolbuffers/protobuf.git - v5.35.0-objectivec,https://github.com/protocolbuffers/protobuf.git - v4.33.5-objectivec,protobuf - 6.33.5
CVE-2026-44843
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load() with allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths to instantiate classes with untrusted constructor arguments. This vulnerability is fixed in 0.3.85 and 1.3.3.
Publish Date: 2026-05-26
URL: CVE-2026-44843
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.406%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-pjwx-r37v-7724
Release Date: 2026-05-09
Fix Resolution (langchain-core): 0.3.85
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
CVE-2025-65106
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.
Publish Date: 2025-11-21
URL: CVE-2025-65106
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.509%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-6qv9-48xg-fc7f
Release Date: 2025-11-20
Fix Resolution (langchain-core): 0.3.80
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
CVE-2024-28088
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
Publish Date: 2024-03-03
URL: CVE-2024-28088
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 1.74%
CVSS 3 Score Details (8.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2024-03-03
Fix Resolution: langchain - 0.1.12
CVE-2026-59886
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_auth-2.28.1-py2.py3-none-any.whl
- pyasn1_modules-0.3.0-py2.py3-none-any.whl
- ❌ pyasn1-0.5.1-py2.py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59886
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.335%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-hm4w-wwcw-mr6r
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-59885
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_auth-2.28.1-py2.py3-none-any.whl
- pyasn1_modules-0.3.0-py2.py3-none-any.whl
- ❌ pyasn1-0.5.1-py2.py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and can deny service to applications that decode untrusted ASN.1 data. The corresponding encoders have the same quadratic behavior when an application re-encodes previously decoded attacker-supplied values. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59885
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.335%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-8ppf-4f7h-5ppj
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-59884
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_auth-2.28.1-py2.py3-none-any.whl
- pyasn1_modules-0.3.0-py2.py3-none-any.whl
- ❌ pyasn1-0.5.1-py2.py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59884
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.349%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-m4p7-r5rc-7g4j
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-34070
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an application passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for templates, .json/.yaml for examples). This issue has been patched in version 1.2.22.
Publish Date: 2026-03-31
URL: CVE-2026-34070
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 1.382%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-03-28
Fix Resolution (langchain-core): 1.2.22
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
CVE-2026-30922
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_auth-2.28.1-py2.py3-none-any.whl
- pyasn1_modules-0.3.0-py2.py3-none-any.whl
- ❌ pyasn1-0.5.1-py2.py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the "pyasn1" library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested "SEQUENCE" ("0x30") or "SET" ("0x31") tags with "Indefinite Length" ("0x80") markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a "RecursionError" or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 ("MAX_OID_ARC_CONTINUATION_OCTETS") does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
Publish Date: 2026-03-18
URL: CVE-2026-30922
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.803%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-03-18
Fix Resolution (pyasn1): 0.6.3
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-23490
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_auth-2.28.1-py2.py3-none-any.whl
- pyasn1_modules-0.3.0-py2.py3-none-any.whl
- ❌ pyasn1-0.5.1-py2.py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.
Publish Date: 2026-01-16
URL: CVE-2026-23490
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.705%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-01-16
Fix Resolution: https://github.com/pyasn1/pyasn1.git - v0.6.2
CVE-2024-1455
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Entity (XXE) exploitation. By nesting multiple layers of entities within an XML document, an attacker can cause the XML parser to consume excessive CPU and memory resources, leading to a denial of service (DoS).
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-03-26
URL: CVE-2024-1455
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.77%
CVSS 3 Score Details (5.9)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-q84m-rmw3-4382
Release Date: 2024-03-26
Fix Resolution: langchain-core - 0.1.35,langchain-core - 0.1.35
CVE-2024-35195
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_api_core-2.17.1-py3-none-any.whl
- ❌ requests-2.31.0-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests "Session", if the first request is made with "verify=False" to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of "verify". This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-05-20
URL: CVE-2024-35195
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.34%
CVSS 3 Score Details (5.6)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: High
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-9wx4-h78v-vm56
Release Date: 2024-05-20
Fix Resolution (requests): 2.32.0
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-40087
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string prompt-template validation was incomplete in two respects. First, some prompt template classes accepted f-string templates and formatted them without enforcing the same attribute-access validation as PromptTemplate. In particular, DictPromptTemplate and ImagePromptTemplate could accept templates containing attribute access or indexing expressions and subsequently evaluate those expressions during formatting. Second, f-string validation based on parsed top-level field names did not reject nested replacement fields inside format specifiers. In this pattern, the nested replacement field appears in the format specifier rather than in the top-level field name. As a result, earlier validation based on parsed field names did not reject the template even though Python formatting would still attempt to resolve the nested expression at runtime. This vulnerability is fixed in 0.3.84 and 1.2.28.
Publish Date: 2026-04-09
URL: CVE-2026-40087
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.262%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-926x-3r5x-gfhw
Release Date: 2026-04-09
Fix Resolution: https://github.com/langchain-ai/langchain.git - langchain-core==1.2.28,https://github.com/langchain-ai/langchain.git - langchain-core==0.3.84
CVE-2024-47081
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_api_core-2.17.1-py3-none-any.whl
- ❌ requests-2.31.0-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with "trust_env=False" on one's Requests Session.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2025-06-09
URL: CVE-2024-47081
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.845%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-9hjg-9r4m-mvj7
Release Date: 2025-06-09
Fix Resolution (requests): 2.32.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2024-10940
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- ❌ langchain_core-0.1.29-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
Publish Date: 2025-03-20
URL: CVE-2024-10940
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.382%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Origin: GHSA-5chr-fjjv-38qv
Release Date: 2025-03-20
Fix Resolution (langchain-core): 0.1.53
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
CVE-2026-25645
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
- langchain_google_genai-0.0.9-py3-none-any.whl (Root Library)
- google_generativeai-0.3.2-py3-none-any.whl
- google_api_core-2.17.1-py3-none-any.whl
- ❌ requests-2.31.0-py3-none-any.whl (Vulnerable Library)
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Prior to version 2.33.0, the "requests.utils.extract_zipped_paths()" utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call "extract_zipped_paths()" directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set "TMPDIR" in their environment to a directory with restricted write access.
Publish Date: 2026-03-25
URL: CVE-2026-25645
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.182%
CVSS 3 Score Details (4.4)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: Low
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.
Suggested Fix
Type: Upgrade version
Release Date: 2026-03-25
Fix Resolution: https://github.com/psf/requests.git - v2.33.0
In order to enable automatic remediation for this issue, please create workflow rules
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /Pipfile,/tmp/ws-ua_20260825123021_OMDTGG/python_SCNTMZ/202608251230221/env/lib/python3.10/site-packages/protobuf-4.25.9.dist-info
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Vulnerabilities
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.
Publish Date: 2025-12-23
URL: CVE-2025-68664
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 43.415%
CVSS 3 Score Details (9.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-c67j-w6g6-q2cm
Release Date: 2025-12-23
Fix Resolution (langchain-core): 0.3.81
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - protobuf-4.25.9-cp37-abi3-manylinux2014_x86_64.whl
No project description provided
Library home page: https://files.pythonhosted.org/packages/a8/5c/53f18822017b8bda6bd8bb4e02048e911fdc79a3dafdc83ab994fe922a84/protobuf-4.25.9-cp37-abi3-manylinux2014_x86_64.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /Pipfile,/tmp/ws-ua_20260825123021_OMDTGG/python_SCNTMZ/202608251230221/env/lib/python3.10/site-packages/protobuf-4.25.9.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Publish Date: 2026-01-23
URL: CVE-2026-0994
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.688%
CVSS 3 Score Details (8.6)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-01-23
Fix Resolution: protobuf - 6.33.5,https://github.com/protocolbuffers/protobuf.git - v33.5,https://github.com/protocolbuffers/protobuf.git - v29.6,https://github.com/protocolbuffers/protobuf.git - v3.29.6-objectivec,https://github.com/protocolbuffers/protobuf.git - v5.29.6-cpp,https://github.com/protocolbuffers/protobuf.git - v5.35.0-objectivec,https://github.com/protocolbuffers/protobuf.git - v4.33.5-objectivec,protobuf - 6.33.5
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load() with allowed_objects="all". This does not enable arbitrary Python object deserialization, but it does allow any trusted LangChain-serializable object to be revived, which is broader than these runtime paths require. As a result, attacker-supplied LangChain serialized constructor dictionaries may cause trusted runtime paths to instantiate classes with untrusted constructor arguments. This vulnerability is fixed in 0.3.85 and 1.3.3.
Publish Date: 2026-05-26
URL: CVE-2026-44843
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.406%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-pjwx-r37v-7724
Release Date: 2026-05-09
Fix Resolution (langchain-core): 0.3.85
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings (not just template variables) in ChatPromptTemplate and related prompt template classes. This issue has been patched in versions 0.3.80 and 1.0.7.
Publish Date: 2025-11-21
URL: CVE-2025-65106
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.509%
CVSS 3 Score Details (8.2)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: Low
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-6qv9-48xg-fc7f
Release Date: 2025-11-20
Fix Resolution (langchain-core): 0.3.80
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)
Publish Date: 2024-03-03
URL: CVE-2024-28088
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 1.74%
CVSS 3 Score Details (8.1)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2024-03-03
Fix Resolution: langchain - 0.1.12
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59886
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.335%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-hm4w-wwcw-mr6r
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and can deny service to applications that decode untrusted ASN.1 data. The corresponding encoders have the same quadratic behavior when an application re-encodes previously decoded attacker-supplied values. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59885
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.335%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-8ppf-4f7h-5ppj
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
Publish Date: 2026-07-14
URL: CVE-2026-59884
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.349%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-m4p7-r5rc-7g4j
Release Date: 2026-07-14
Fix Resolution (pyasn1): 0.6.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an application passes user-influenced prompt configurations to load_prompt() or load_prompt_from_config(), an attacker can read arbitrary files on the host filesystem, constrained only by file-extension checks (.txt for templates, .json/.yaml for examples). This issue has been patched in version 1.2.22.
Publish Date: 2026-03-31
URL: CVE-2026-34070
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 1.382%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-03-28
Fix Resolution (langchain-core): 1.2.22
Direct dependency fix Resolution (langchain-google-genai): 1.0.7
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the "pyasn1" library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested "SEQUENCE" ("0x30") or "SET" ("0x31") tags with "Indefinite Length" ("0x80") markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a "RecursionError" or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 ("MAX_OID_ARC_CONTINUATION_OCTETS") does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
Publish Date: 2026-03-18
URL: CVE-2026-30922
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.803%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-03-18
Fix Resolution (pyasn1): 0.6.3
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - pyasn1-0.5.1-py2.py3-none-any.whl
Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)
Library home page: https://files.pythonhosted.org/packages/d1/75/4686d2872bf2fc0b37917cbc8bbf0dd3a5cdb0990799be1b9cbf1e1eb733/pyasn1-0.5.1-py2.py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/pyasn1-0.5.1.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.
Publish Date: 2026-01-16
URL: CVE-2026-23490
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.705%
CVSS 3 Score Details (7.5)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-01-16
Fix Resolution: https://github.com/pyasn1/pyasn1.git - v0.6.2
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Entity (XXE) exploitation. By nesting multiple layers of entities within an XML document, an attacker can cause the XML parser to consume excessive CPU and memory resources, leading to a denial of service (DoS).
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-03-26
URL: CVE-2024-1455
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.77%
CVSS 3 Score Details (5.9)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-q84m-rmw3-4382
Release Date: 2024-03-26
Fix Resolution: langchain-core - 0.1.35,langchain-core - 0.1.35
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests "Session", if the first request is made with "verify=False" to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of "verify". This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2024-05-20
URL: CVE-2024-35195
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.34%
CVSS 3 Score Details (5.6)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: High
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-9wx4-h78v-vm56
Release Date: 2024-05-20
Fix Resolution (requests): 2.32.0
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string prompt-template validation was incomplete in two respects. First, some prompt template classes accepted f-string templates and formatted them without enforcing the same attribute-access validation as PromptTemplate. In particular, DictPromptTemplate and ImagePromptTemplate could accept templates containing attribute access or indexing expressions and subsequently evaluate those expressions during formatting. Second, f-string validation based on parsed top-level field names did not reject nested replacement fields inside format specifiers. In this pattern, the nested replacement field appears in the format specifier rather than in the top-level field name. As a result, earlier validation based on parsed field names did not reject the template even though Python formatting would still attempt to resolve the nested expression at runtime. This vulnerability is fixed in 0.3.84 and 1.2.28.
Publish Date: 2026-04-09
URL: CVE-2026-40087
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.262%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-926x-3r5x-gfhw
Release Date: 2026-04-09
Fix Resolution: https://github.com/langchain-ai/langchain.git - langchain-core==1.2.28,https://github.com/langchain-ai/langchain.git - langchain-core==0.3.84
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with "trust_env=False" on one's Requests Session.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: 2025-06-09
URL: CVE-2024-47081
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.845%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-9hjg-9r4m-mvj7
Release Date: 2025-06-09
Fix Resolution (requests): 2.32.4
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - langchain_core-0.1.29-py3-none-any.whl
Building applications with LLMs through composability
Library home page: https://files.pythonhosted.org/packages/7e/e6/f3b22fc973610466b0b6cc2c15a65a4b706bc687975bbd96ddeb800bb54b/langchain_core-0.1.29-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/langchain_core-0.1.29.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
Publish Date: 2025-03-20
URL: CVE-2024-10940
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.382%
CVSS 3 Score Details (5.3)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: None
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Origin: GHSA-5chr-fjjv-38qv
Release Date: 2025-03-20
Fix Resolution (langchain-core): 0.1.53
Direct dependency fix Resolution (langchain-google-genai): 0.0.11
In order to enable automatic remediation, please create workflow rules
Vulnerable Library - requests-2.31.0-py3-none-any.whl
Python HTTP for Humans.
Library home page: https://files.pythonhosted.org/packages/70/8e/0e2d847013cb52cd35b38c009bb167a1a26b2ce6cd6965bf26b47bc0bf44/requests-2.31.0-py3-none-any.whl
Sample Path to Dependency File: /Pipfile
Path to vulnerable library: /tmp/containerbase/cache/.local/share/virtualenvs/AutoPrompt-jrKn-qKh-python/lib/python3.10/site-packages/requests-2.31.0.dist-info
Dependency Hierarchy:
Found in HEAD commit: 09f51f74740b88648be208302ec569217b51a66f
Found in base branch: main
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Requests is a HTTP library. Prior to version 2.33.0, the "requests.utils.extract_zipped_paths()" utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call "extract_zipped_paths()" directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set "TMPDIR" in their environment to a directory with restricted write access.
Publish Date: 2026-03-25
URL: CVE-2026-25645
Threat Assessment
Exploit Maturity: Not Defined
EPSS: 0.182%
CVSS 3 Score Details (4.4)
Base Score Metrics:
- Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: High
- Privileges Required: Low
- User Interaction: Required
- Scope: Unchanged
- Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: None
For more information on CVSS3 Scores, click here.Suggested Fix
Type: Upgrade version
Release Date: 2026-03-25
Fix Resolution: https://github.com/psf/requests.git - v2.33.0
In order to enable automatic remediation for this issue, please create workflow rules