Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filtersLangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
n8n: Stored XSS in Chat Trigger Node
LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability
LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`
n8n has XSS in Chat Trigger Node through Custom CSS
LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
RediSearch Query Injection in @langchain/langgraph-checkpoint-redis
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
LangChain serialization injection vulnerability enables secret extraction
Stored XSS in n8n LangChain Chat Trigger Node via initialMessages Parameter
N8N's Chat Trigger component is vulnerable to XSS
Langchain Path Traversal vulnerability
@langchain/community SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.