{"action":"Upgrade langchain-community to 0.2.5 or later.","affected":[{"fixed":"0.2.5","introduced":"0"}],"component":"langchain-community","cve_ids":["CVE-2024-2965"],"ecosystem":"PyPI","epss":0.00304,"exploited":false,"fixed_versions":["0.2.5"],"ghsa_id":"GHSA-3hjh-jh2h-vrg6","id":"tcs_01M5KEVY1CZD2Y20D7P0BX8TV3","modified_at":"2026-07-13T16:43:37.506313050Z","published_at":"2024-06-06T21:30:36Z","references":["https://osv.dev/vulnerability/GHSA-3hjh-jh2h-vrg6","https://nvd.nist.gov/vuln/detail/CVE-2024-2965","https://github.com/langchain-ai/langchain/pull/22903","https://github.com/langchain-ai/langchain/commit/73c42306745b0831aa6fe7fe4eeb70d2c2d87a82","https://github.com/langchain-ai/langchain/commit/9a877c7adbd06f90a2518152f65b562bd90487cc","https://github.com/langchain-ai/langchain","https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2024-118.yaml","https://huntr.com/bounties/90b0776d-9fa6-4841-aac4-09fde5918cae"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-3hjh-jh2h-vrg6","url":"https://osv.dev/vulnerability/GHSA-3hjh-jh2h-vrg6"}],"summary":"Denial of service in langchain-community"}