CVE-2025-6984
2 advisories.
PyPI/langchain-community CVE-2025-6984: high 7.5
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Action: Upgrade langchain-community to 0.3.27 or later.
pip install langchain-community==0.3.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.27 | - |
Fixed versions
| 0.3.27 |
Sources
- osv: GHSA-pc6w-59fv-rh23
- https://nvd.nist.gov/vuln/detail/CVE-2025-6984
- https://github.com/langchain-ai/langchain-community/commit/e842452108089524e22c3a2ced851c021884556f
- https://github.com/langchain-ai/langchain-community
- https://github.com/langchain-ai/langchain/blob/d79b5813a0b3b243c612b77013768995e46c4337/libs/langchain/langchain/document_loaders/evernote.py#L1-L23
- https://huntr.com/bounties/a6b521cf-258c-41c0-9edb-d8ef976abb2a
CVE-2025-6984 · published · modified · JSON
PyPI/langchain-community CVE-2025-6984: high 7.5
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Action: Upgrade langchain-community to 0.3.27 or later.
pip install langchain-community==0.3.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.27 | - |
Fixed versions
| 0.3.27 |
Sources
- osv: PYSEC-2026-1515
- https://nvd.nist.gov/vuln/detail/CVE-2025-6984
- https://github.com/langchain-ai/langchain-community/commit/e842452108089524e22c3a2ced851c021884556f
- https://github.com/langchain-ai/langchain-community
- https://github.com/langchain-ai/langchain/blob/d79b5813a0b3b243c612b77013768995e46c4337/libs/langchain/langchain/document_loaders/evernote.py#L1-L23
- https://huntr.com/bounties/a6b521cf-258c-41c0-9edb-d8ef976abb2a
- https://pypi.org/project/langchain-community
- https://github.com/advisories/GHSA-pc6w-59fv-rh23
CVE-2025-6984 · published · modified · JSON