Low

langchain Server-Side Request Forgery vulnerability

Disclosed: 26.02.2024
Updated: 11.10.2026 13:18

With the following crawler configuration:

python

from bs4 import BeautifulSoup as Soup

url = "https://example.com"
loader = RecursiveUrlLoader(
    url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text 
)
docs = loader.load()

An attacker in control of the contents of https://example.com could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and the crawler would proceed to download that file as well even though prevent_outside=True.

https://github.com/langchain-ai/langchain/blob/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22/libs/community/langchain_community/document_loaders/recursive_url_loader.py#L51-L51

Resolved in https://github.com/langchain-ai/langchain/pull/15559

Affected software

Click a technology to see all vulnerabilities affecting it.

Platform	Package	Vulnerable versions	Fixed in
Python (PyPI)	langchain	< 0.1.0	0.1.0
Python (PyPI)	langchain-exa	< 0.1.0	0.1.0

References

CVSS score 3.7/10

CVSS vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
Weakness (CWE): CWE-918
Platform: Python (PyPI)
Package: langchain, langchain-exa
Disclosed: 26.02.2024
Updated: 11.10.2026 13:18

Sources and licenses

OSV / GitHub Advisory Database - PYSEC-2024-235 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-h9j7-5xvc-qhg5 - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2026-1509 - PyPA Advisory Database; CC BY 4.0

Vulnerability history: langchain-exa

All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.

Total entries: 2
First → latest: 02.2024 01.2026
Without a fix: 0
Exploited in attacks: 0

Severity breakdown

High 1
Low 1

Disclosures per year

2024: 1
2025: 0
2026: 1

12.01.2026

LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa

High · 7.5 CVE-2024-58340 < 1.0.0a1 1.0.0a1
26.02.2024

langchain Server-Side Request Forgery vulnerability this entry

Low · 3.7 CVE-2024-0243 < 0.1.0 0.1.0

Know which vulnerabilities affect your application

With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.

Connect your application