CVE-2023-46229

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server

published October 19, 2023

CVSS

—

EPSS

48%

Percentile

98.8

In the wild

Unconfirmed

What it is

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.47625 · 98.8th percentile
Published: 2023-10-19T00:00Z

EPSS history

Timeline

19 OCT 00:00Z
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server
cvelistv5