CVE-2024-58340
1 advisory.
PyPI/langchain-exa CVE-2024-58340: high 7.5, EPSS 0.48%
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
Action: Upgrade langchain-exa to 1.0.0a1 or later.
pip install langchain-exa==1.0.0a1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0a1 | - |
Fixed versions
| 1.0.0a1 |
Sources
- osv: PYSEC-2026-75
- https://www.langchain.com/
- https://www.vulncheck.com/advisories/langchain-mrkloutputparser-redos
- https://huntr.com/bounties/e7ece02c-d4bb-4166-8e08-6baf4f8845bb
- https://github.com/langchain-ai/langchain
CVE-2024-58340 · published · modified · JSON