CVE-2024-1455
2 advisories.
PyPI/langchain-core CVE-2024-1455: medium 5.9
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Action: Upgrade langchain-core to 0.1.35 or later.
pip install langchain-core==0.1.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.35 | - |
Fixed versions
| 0.1.35 |
Sources
- osv: GHSA-q84m-rmw3-4382
- https://nvd.nist.gov/vuln/detail/CVE-2024-1455
- https://github.com/langchain-ai/langchain/pull/17250
- https://github.com/langchain-ai/langchain/pull/19653
- https://github.com/langchain-ai/langchain/pull/19660
- https://github.com/langchain-ai/langchain/commit/727d5023ce88e18e3074ef620a98137d26ff92a3
- https://github.com/langchain-ai/langchain
- https://huntr.com/bounties/4353571f-c70d-4bfd-ac08-3a89cecb45b6
CVE-2024-1455 · published · modified · JSON
PyPI/langchain-core CVE-2024-1455: medium 5.9
LangChain's XMLOutputParser vulnerable to XML Entity Expansion
Action: Upgrade langchain-core to 0.1.35 or later.
pip install langchain-core==0.1.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.35 | - |
Fixed versions
| 0.1.35 |
Sources
- osv: PYSEC-2026-1519
- https://nvd.nist.gov/vuln/detail/CVE-2024-1455
- https://github.com/langchain-ai/langchain/pull/17250
- https://github.com/langchain-ai/langchain/pull/19653
- https://github.com/langchain-ai/langchain/pull/19660
- https://github.com/langchain-ai/langchain/commit/727d5023ce88e18e3074ef620a98137d26ff92a3
- https://github.com/langchain-ai/langchain
- https://huntr.com/bounties/4353571f-c70d-4bfd-ac08-3a89cecb45b6
- https://pypi.org/project/langchain-core
- https://github.com/advisories/GHSA-q84m-rmw3-4382
CVE-2024-1455 · published · modified · JSON