CVE-2023-46229

—1

CVSS 3.1

8.8 high

EPSS

45%p99

Published

Oct 19, 2023 (Oct 19, 2023)

Modified

Jun 17, 2026

Description

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.

Vendors: langchain
Products: langchain
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (44.7%)

In the news1 stories

Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

The Hacker NewsAug 28, 03:53 UTC · Aug 28, 2024Vulnerability CVE-2024-27132 CVE-2023-48022 CVE-2023-46229+1 CVEs