CodexGuild Knowledge Base

LangChain Server Side Request Forgery vulnerability

as of Oct 19, 2023 · applies to langchain >= 0, < 0.0.317 · canonical · codexguild.com/kb/ghsa-655w-fm8m-m478 · exported 2026-10-11

Canonical as of Oct 19, 2023

LangChain Server Side Request Forgery vulnerability

High severity. Affects langchain >= 0, < 0.0.317. Upgrade to 0.0.317 or later.

CVE-2023-46229 / GHSA-655w-fm8m-m478 · severity: high · CVSS 8.8 · PyPI

Affected

langchain >= 0, < 0.0.317 → fixed in 0.0.317

Details

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.

Source: GHSA-655w-fm8m-m478 — GitHub Advisory Database (CC-BY-4.0).