langchain langchain

Name: langchain langchain
Brand: langchain

productUS

cpe:2.3:a:langchain:langchain:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

15critical9high3medium0low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-46229US	high8.8	47.6% (99th)	Exploit	0.0.317	2023-10-19	< 0.0.317
CVE-2024-8309US	critical9.8	13.7% (96th)	Exploit	no fix	2024-10-29	= 0.2.5
CVE-2023-36281US	critical9.8	3.44% (89th)	Exploit	no fix	2023-08-22	= 0.0.171
CVE-2024-28088US	high8.1	1.74% (78th)	Exploit	0.1.12	2024-03-04	< 0.1.12
CVE-2023-29374US	critical9.8	39.7% (99th)	—	no fix	2023-04-05	≤ 0.0.131
CVE-2025-2828US	critical10.0	21.0% (98th)	—	0.0.28	2025-06-23	< 0.0.28
CVE-2023-36188US	critical9.8	1.90% (80th)	—	no fix	2023-07-06	= 0.0.64
CVE-2024-3571US	high8.8	1.87% (79th)	—	no fix	2024-04-16	= 0.0.351
CVE-2023-38896US	critical9.8	1.84% (79th)	—	no fix	2023-08-15	≤ 0.0.194
CVE-2023-34540US	critical9.8	1.68% (77th)	—	no fix	2023-06-14	= 0.0.171
CVE-2023-39631US	critical9.8	1.60% (76th)	—	no fix	2023-09-01	= 0.0.245
CVE-2023-39659US	critical9.8	1.53% (75th)	—	no fix	2023-08-15	≤ 0.0.232
CVE-2023-38860US	critical9.8	1.42% (73rd)	—	no fix	2023-08-15	= 0.0.231
CVE-2023-36189US	high7.5	1.25% (69th)	—	no fix	2023-07-06	= 0.0.64
CVE-2023-36095US	critical9.8	1.17% (67th)	—	no fix	2023-08-05	= 0.0.194
CVE-2023-36258US	critical9.8	1.07% (65th)	—	no fix	2023-07-03	= 0.0.199
CVE-2023-34541US	critical9.8	0.94% (61st)	—	no fix	2023-06-20	= 0.0.171
CVE-2024-1455US	medium5.9	0.76% (55th)	—	no fix	2024-03-26	0.1.4 → 0.1.35
CVE-2023-32786US	high7.5	0.71% (53rd)	—	no fix	2023-10-20	≤ 0.0.155
CVE-2024-3095US	high7.7	0.69% (53rd)	—	0.2.9	2024-06-06	0.1.5 → 0.2.9
CVE-2024-2057US	critical9.8	0.58% (47th)	—	no fix	2024-03-01	= 0.0.26
CVE-2024-0243US	high8.1	0.52% (44th)	—	0.1.0	2024-02-26	< 0.1.0
CVE-2024-58340US	high7.5	0.48% (41st)	—	no fix	2026-01-12	≤ 0.3.1
CVE-2026-44843US	—	0.41% (35th)	—	1.3.3	2026-05-26	2 versions
CVE-2024-5998US	high7.8	0.36% (30th)	—	0.2.9	2024-09-17	< 0.2.9
CVE-2024-7042US	critical9.8	0.31% (24th)	—	0.3.1	2024-10-29	< 0.3.1
CVE-2024-2965US	medium4.7	0.30% (23rd)	—	0.2.5	2024-06-06	< 0.2.5
CVE-2026-55443US	medium5.5	0.21% (11th)	—	1.3.9	2026-06-22	< 1.3.9

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')8 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')6 CVEs
CWE-918Server-Side Request Forgery (SSRF)6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-31Path Traversal: 'dir\..\..\filename'1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan