CVE-2023-46229

CVSS 3.1: 8.8 high
EPSS: 45%p99
Published: Oct 19, 2023 · Oct 19, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-46229 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.

Vendors: langchain

Products: langchain

Weakness: CWE-918

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (44.7%)

In the news

1 story

Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

The Hacker NewsAug 28, 03:53 UTC · Aug 28, 2024VulnerabilityCVE-2024-27132 CVE-2023-48022 CVE-2023-46229+12 · 1 read