Crítica
CVE-2026-10561
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 67
Restablecer filtros
Alta
ghsa-g28h-2cmm-rj9x
langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs
Crítica
CVE-2026-61732
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
Crítica
CVE-2026-71428
unstructured: Server-Side Request Forgery in the URL-based partitioning
Alta
CVE-2026-55253
LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure
Media
CVE-2026-48775
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
Alta
CVE-2026-45401
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)
Alta
CVE-2026-44843
LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
Baja
CVE-2026-7847
Langchain-Chatchat Uses Insufficiently Random Values
Baja
CVE-2026-7845
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
Baja
CVE-2026-7846
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
Media
CVE-2026-40087
LangChain has incomplete f-string validation in prompt templates
Media
CVE-2026-27794
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
Baja
CVE-2026-26013
LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
Sin evaluar
pysec-2026-1070
Malicious code in langchain-core-mcp (PyPI)
Alta
CVE-2025-65106
LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
Alta
CVE-2025-64439
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
Alta
CVE-2025-8709
LangGraph's SQLite store implementation has a SQL Injection Vulnerability
Alta
CVE-2025-64104
LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore
Alta
CVE-2025-6985
LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
Alta
CVE-2025-6984
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
Baja
CVE-2025-6855
Langchain-Chatchat vulnerable to path traversal
Baja
CVE-2025-6854
Langchain-Chatchat vulnerable to path traversal
Baja
CVE-2025-6853
Langchain-Chatchat has a Path Traversal vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.