CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2023-46229
High (8.8) in langchain langchain. EPSS 48% chance of exploitation in the next 30 days. Fixed in langchain 0.0.317.
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Severity
- EPSS
- 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- langchain:langchain
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-655w-fm8m-m478 | PyPI | langchain | <0.0.317 | 0.0.317 |
| PYSEC-2023-205 | PyPI | langchain | <0.0.317 | 0.0.317 |