Security Intel Hub 32+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

Medium

LangGraph Fix Namespace LIKE Query Scope in Postgres/SQLite Store

github.com · 2026-08-07

langgraph checkpoint-postgres · langgraph checkpoint-sqlite

High

CVE-2026-71433: SQL Injection via Namespace Prefix Matching in langgraph-checkpoint

CVE-2026-71433 · github.com · 2026-08-07

langgraph-checkpoint-postgres < 3.1.1 · langgraph-checkpoint-sqlite < 3.1.1

High

LangChain MongoDBSaver NoSQL Injection Vulnerability

github.com · 2026-08-05

@langchain/langgraph-checkpoint-mongodb <= 1.3.0

Unknown

langchain-checkpoint-mongodb fix for missing type validation in MongoDB query inputs

github.com · 2026-08-05

langchain-checkpoint-mongodb

High

MongoDBSaver NoSQL Injection in thread_id Causes Cross-Tenant Data Disclosure

github.com · 2026-08-05

langgraphjs MongoDBSaver

Medium

LangGraph Cache Key Collision Vulnerability: Cache Poisoning Risk and Fix

github.com · 2026-07-05

langgraph-ai/langgraph

Medium

LangGraph Cache Key Collision Vulnerability Fix Guide

github.com · 2026-07-05

langgraph

Medium

LangGraph SDK Path Traversal Vulnerability Advisory (CVE-2024-48776)

CVE-2024-48776 · github.com · 2026-06-17

langgraph-sdk (Python)

Premium intel

High

LangGraph JsonPlusSerializer Deserialization RCE Vulnerability (CVE-2025-49775)

CVE-2025-49775 · github.com · 2026-06-17

LangGraph < 2025-10 patched version (with JsonPlusSerializer enabled)

High

LangChain LangSmith SDK Deserialization Vulnerability CVE-2024-45134 Analysis

GHSA-3644-q5cj-c5c7 · github.com · 2026-05-28

langchain-classic < 1.0.7 · langchain < 0.3.30 …

Premium intel

High

CVE-2024-4843 LangChain Unsafe Deserialization Vulnerability Advisory

CVE-2024-4843 · github.com · 2026-05-27

langchain-core <=1.3.2, >1 · langchain-core <=0.3.84

Low

Image token counting SSRF protection can be bypassed via DNS rebinding · Advisory · langchain-ai/langchain · GitHub

github.com · 2026-04-25

langchain-openai < 1.1.14

Medium

HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass · Advisory · langchain-ai/langchain · GitHub

github.com · 2026-04-25

langchain-text-splitters < 1.1.2

Medium

LangSmith SDK Streaming Token Events Bypass Output Redaction

github.com · 2026-04-23

langsmith <=0.5.18 · langsmith <=0.7.30

High

LangChain Prompt Template Injection Vulnerability Fix

github.com · 2026-04-10

LangChain libs/core < fix(core): sanitize prompts more (#36613) 6bab0ba

Critical

LangChain langchain-core Prompt Template Attribute Access Vulnerability Leading to RCE and Fix

github.com · 2026-04-10

langchain-core < patched version

High

LangChain f-string Template Injection Vulnerability Fix Analysis

github.com · 2026-04-10

LangChain langchain-core

Medium

LangChain CVE-2024-40087: Incomplete f-string Validation Allowing Attribute Access

CVE-2024-40087 · github.com · 2026-04-10

langchain_core <0.3.83 · langchain_core <1.2.28

High

libxml2 CVE-2024-37465 Heap Buffer Overflow Vulnerability Advisory

CVE-2024-37465 · github.com · 2026-04-02

libxml2 < 2.12.6

High

LangChain langchain-core Path Traversal Vulnerability (CWE-22) with POC

github.com · 2026-04-02

langchain-core < 1.2.2

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 32+