{"action":"Upgrade langchain to 0.1.0 or later.","affected":[{"fixed":"0.1.0","introduced":"0"}],"component":"langchain","cve_ids":["CVE-2024-0243"],"ecosystem":"PyPI","epss":0.00517,"exploited":false,"fixed_versions":["0.1.0"],"ghsa_id":"GHSA-h9j7-5xvc-qhg5","id":"tcs_01M5KFKB412ZMH0RP4KKC9YZF1","modified_at":"2026-07-07T17:56:41.991383859Z","published_at":"2024-02-26T18:30:29Z","references":["https://osv.dev/vulnerability/GHSA-h9j7-5xvc-qhg5","https://nvd.nist.gov/vuln/detail/CVE-2024-0243","https://github.com/langchain-ai/langchain/pull/15559","https://github.com/langchain-ai/langchain/commit/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22","https://github.com/langchain-ai/langchain","https://github.com/langchain-ai/langchain/blob/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22/libs/community/langchain_community/document_loaders/recursive_url_loader.py#L51-L51","https://github.com/pypa/advisory-database/tree/main/vulns/langchain-exa/PYSEC-2024-235.yaml","https://huntr.com/bounties/370904e7-10ac-40a4-a8d4-e2d16e1ca861"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-h9j7-5xvc-qhg5","url":"https://osv.dev/vulnerability/GHSA-h9j7-5xvc-qhg5"}],"summary":"langchain Server-Side Request Forgery vulnerability"}