How many CVEs have a located fix in langchain-ai/langchain?

30 published CVEs have a fix traced to functions in langchain-ai/langchain, touching 142 functions across 102 files.

Which function in langchain-ai/langchain has been patched by the most CVEs?

warn_once in langchain/utilities/python.py has been changed by 3 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in langchain-ai/langchain?

The median fix changes 126 lines. 13% of fixes change 20 lines or fewer, and 10% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

#155 of 500 repositories

langchain-ai/langchain

Name: langchain-ai/langchain: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix June 22, 2026

30

CVE fixes located

Published CVEs

142

Functions patched

Distinct function sites

102

Files patched

Distinct source files

2023–2026

Years covered

By CVE publication date

Overview

30 published CVEs have a fix traced to functions in langchain-ai/langchain, the earliest published in 2023. Those fixes changed 142 distinct functions across 102 files, in 470 patch hunks.

Among the 500 repositories tracked here, langchain-ai/langchain ranks #155 by the number of CVEs with a located fix.

Most patched functions

Functions in langchain-ai/langchain changed by the most CVE fixes.

Most patched files

Files in langchain-ai/langchain changed by the most CVE fixes.

1langchain/chains/pal/base.py3 CVEs · 4 functions
2libs/experimental/langchain_experimental/pal_chain/base.py3 CVEs · 3 functions
3langchain/utilities/python.py3 CVEs · 2 functions
4libs/core/langchain_core/prompts/string.py2 CVEs · 6 functions
5libs/core/langchain_core/prompts/image.py2 CVEs · 5 functions
6libs/langchain/langchain/agents/load_tools.py2 CVEs · 5 functions
7libs/langchain/langchain/prompts/loading.py2 CVEs · 2 functions
8libs/community/langchain_community/retrievers/web_research.py2 CVEs · 1 functions
9libs/core/langchain_core/load/load.py1 CVEs · 7 functions
10libs/core/langchain_core/prompts/loading.py1 CVEs · 7 functions

Fix size

How much code a CVE fix in langchain-ai/langchain changes, with backports counted once.

126

Median lines changed

Added plus removed, per CVE

13%

Fixes of 20 lines or fewer

Share of CVE fixes

10%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in langchain-ai/langchain, and the functions each fix changed.

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
CVE-2026-55443_python_search _is_within_allowed_prefix _is_within_root
Medium · CVSS 5.5
EPSS 0.2%2026-06-22
LangChain has incomplete f-string validation in prompt templates
CVE-2026-40087_parse_f_string_fields get_template_variables DictPromptTemplate
Medium · CVSS 5.3
EPSS 0.5%2026-04-09
LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
CVE-2026-34070load_prompt_from_config load_prompt _load_prompt
High · CVSS 7.5
EPSS 1.2%2026-03-31
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
CVE-2026-26013provides _url_to_size get_num_tokens_from_messages
Low · CVSS 3.7
EPSS 0.5%2026-02-10
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
CVE-2025-68664_get_default_allowed_class_paths is loads
Critical · CVSS 9.3
EPSS 42.9%2025-12-23
LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
CVE-2025-65106_RestrictedSandboxedEnvironment _get_key get_template_variables
High · CVSS 8.3
EPSS 0.5%2025-11-21
XXE Vulnerability in langchain-ai/langchain
CVE-2025-6985convert_possible_tags_to_header __init__
High · CVSS 7.5
EPSS 0.5%2025-10-06
SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain
CVE-2025-2828_get_tools_requests_get load_tools RequestsToolkit
Critical · CVSS 10.0
EPSS 21.0%2025-06-23
langchain-core allows unauthorized users to read arbitrary files from the host file system
CVE-2024-10940format encode_image ImagePromptTemplate
Medium · CVSS 5.3
EPSS 0.4%2025-03-20
SQL Injection in langchain-ai/langchain
CVE-2024-8309__init__
Low · CVSS 2.1
EPSS 13.7%2024-10-29
LangChain pickle deserialization of untrusted data
CVE-2024-5998__init__deserialize_from_bytes
High · CVSS 8.4
EPSS 0.4%2024-09-17
langchain-experimental vulnerable to Arbitrary Code Execution
CVE-2024-21513_try_eval
Critical · CVSS 9.0
EPSS 1.9%2024-07-15

Get an alert for each new langchain-ai/langchain CVE, with the patched functions and AI-written analysis.

Monitor langchain CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

answerdev/answer30 CVEs apache/nifi30 CVEs centreon/centreon30 CVEs nilsteampassnet/teampass30 CVEs openbao/openbao30 CVEs snipe/snipe-it30 CVEs vyperlang/vyper30 CVEs contao/contao31 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in langchain-ai/langchain.

How many CVEs have a located fix in langchain-ai/langchain?: 30 published CVEs have a fix traced to functions in langchain-ai/langchain, touching 142 functions across 102 files.
Which function in langchain-ai/langchain has been patched by the most CVEs?: warn_once in langchain/utilities/python.py has been changed by 3 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in langchain-ai/langchain?: The median fix changes 126 lines. 13% of fixes change 20 lines or fewer, and 10% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track langchain-ai/langchain CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing