CVE-2023-46229

8.8

HIGHCVSS v3

Published

October 19, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.

langchain-ai/langchain

GitHubThe agent engineering platform.

< 0.0.317NVD

langchain

Python Package IndexBuilding applications with LLMs through composability

< 0.0.317NVD

langchain

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Rust port of the ideas produced in langchain-py and langchain-js

< 0.0.317NVD

LangChain

NuGet GalleryLangChain meta-package with the most used things.

< 0.0.317NVD

langchain

RubyGemsWrite a longer description or delete this line.

< 0.0.317NVD

langchain

NPMTypescript bindings for langchain

< 0.0.317NVD

Security Advisories

CVE-2023-46229

Description

More on this CVE