{"action":"Upgrade langchain to 0.2.5 or later.","affected":[{"fixed":"0.2.5","introduced":"0"}],"component":"langchain","cve_ids":["CVE-2024-2965"],"ecosystem":"PyPI","epss":0.00304,"exploited":false,"fixed_versions":["0.2.5"],"ghsa_id":"GHSA-3hjh-jh2h-vrg6","id":"tcs_01M5KGKYZQ1AMVV36YZTJ44PMN","modified_at":"2026-07-13T16:43:37.506313050Z","published_at":"2024-06-06T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-118","https://huntr.com/bounties/90b0776d-9fa6-4841-aac4-09fde5918cae","https://github.com/langchain-ai/langchain/commit/73c42306745b0831aa6fe7fe4eeb70d2c2d87a82","https://github.com/advisories/GHSA-3hjh-jh2h-vrg6"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"PYSEC-2024-118","url":"https://osv.dev/vulnerability/PYSEC-2024-118"}],"summary":"A Denial-of-Service (DoS) vulnerability exists in the `SitemapLoader` class of the `langchain-ai/langchain` repository, affecting all versions. The `parse_sitemap` method, responsible for parsing site"}