Vulnerabilities > CVE-2024-0243 - Unspecified vulnerability in Langchain

CVSS 8.1 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

langchain

NVD

Published: 2024-02-26

Updated: 2025-02-25

Summary

With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader( url=url, max_depth=2, extractor=lambda x: Soup(x, "html.parser").text ) docs = loader.load() ``` An attacker in control of the contents of `https://example.com` could place a malicious HTML file in there with links like "https://example.completely.different/my_file.html" and the crawler would proceed to download that file as well even though `prevent_outside=True`. https://github.com/langchain-ai/langchain/blob/bf0b3cc0b5ade1fb95a5b1b6fa260e99064c2e22/libs/community/langchain_community/document_loaders/recursive_url_loader.py#L51-L51 Resolved in https://github.com/langchain-ai/langchain/pull/15559

Vulnerable Configurations

Part	Description	Count
Application	Langchain Langchain Langchain - Langchain Langchain 0.0.1 Langchain Langchain 0.0.2 Langchain Langchain 0.0.4 Langchain Langchain 0.0.5 Langchain Langchain 0.0.64 Langchain Langchain 0.0.65 Langchain Langchain 0.0.66 Langchain Langchain 0.0.67 Langchain Langchain 0.0.68 Langchain Langchain 0.0.69 Langchain Langchain 0.0.70 Langchain Langchain 0.0.71 Langchain Langchain 0.0.72 Langchain Langchain 0.0.73 Langchain Langchain 0.0.74 Langchain Langchain 0.0.75 Langchain Langchain 0.0.76 Langchain Langchain 0.0.77 Langchain Langchain 0.0.78 Langchain Langchain 0.0.79 Langchain Langchain 0.0.80 Langchain Langchain 0.0.81 Langchain Langchain 0.0.82 Langchain Langchain 0.0.83 Langchain Langchain 0.0.84 Langchain Langchain 0.0.85 Langchain Langchain 0.0.86 Langchain Langchain 0.0.87 Langchain Langchain 0.0.88 Langchain Langchain 0.0.89 Langchain Langchain 0.0.90 Langchain Langchain 0.0.91 Langchain Langchain 0.0.92 Langchain Langchain 0.0.93 Langchain Langchain 0.0.94 Langchain Langchain 0.0.95 Langchain Langchain 0.0.96 Langchain Langchain 0.0.97 Langchain Langchain 0.0.98 Langchain Langchain 0.0.99 Langchain Langchain 0.0.100 Langchain Langchain 0.0.101 Langchain Langchain 0.0.102 Langchain Langchain 0.0.103 Langchain Langchain 0.0.104 Langchain Langchain 0.0.105 Langchain Langchain 0.0.106 Langchain Langchain 0.0.107 Langchain Langchain 0.0.108 Langchain Langchain 0.0.109 Langchain Langchain 0.0.110 Langchain Langchain 0.0.111 Langchain Langchain 0.0.112 Langchain Langchain 0.0.113 Langchain Langchain 0.0.114 Langchain Langchain 0.0.115 Langchain Langchain 0.0.116 Langchain Langchain 0.0.117 Langchain Langchain 0.0.118 Langchain Langchain 0.0.119 Langchain Langchain 0.0.120 Langchain Langchain 0.0.121 Langchain Langchain 0.0.122 Langchain Langchain 0.0.123 Langchain Langchain 0.0.124 Langchain Langchain 0.0.125 Langchain Langchain 0.0.126 Langchain Langchain 0.0.127 Langchain Langchain 0.0.128 Langchain Langchain 0.0.129 Langchain Langchain 0.0.130 Langchain Langchain 0.0.131 Langchain Langchain 0.0.132 Langchain Langchain 0.0.133 Langchain Langchain 0.0.134 Langchain Langchain 0.0.135 Langchain Langchain 0.0.136 Langchain Langchain 0.0.137 Langchain Langchain 0.0.138 Langchain Langchain 0.0.139 Langchain Langchain 0.0.140 Langchain Langchain 0.0.141 Langchain Langchain 0.0.142 Langchain Langchain 0.0.143 Langchain Langchain 0.0.144 Langchain Langchain 0.0.145 Langchain Langchain 0.0.146 Langchain Langchain 0.0.147 Langchain Langchain 0.0.148 Langchain Langchain 0.0.149 Langchain Langchain 0.0.150 Langchain Langchain 0.0.151 Langchain Langchain 0.0.152 Langchain Langchain 0.0.153 Langchain Langchain 0.0.154 Langchain Langchain 0.0.155 Langchain Langchain 0.0.156 Langchain Langchain 0.0.157 Langchain Langchain 0.0.158 Langchain Langchain 0.0.159 Langchain Langchain 0.0.160 Langchain Langchain 0.0.161 Langchain Langchain 0.0.162 Langchain Langchain 0.0.163 Langchain Langchain 0.0.164 Langchain Langchain 0.0.165 Langchain Langchain 0.0.166 Langchain Langchain 0.0.167 Langchain Langchain 0.0.168 Langchain Langchain 0.0.169 Langchain Langchain 0.0.170 Langchain Langchain 0.0.171 Langchain Langchain 0.0.172 Langchain Langchain 0.0.173 Langchain Langchain 0.0.174 Langchain Langchain 0.0.175 Langchain Langchain 0.0.176 Langchain Langchain 0.0.177 Langchain Langchain 0.0.178 Langchain Langchain 0.0.179 Langchain Langchain 0.0.180 Langchain Langchain 0.0.181 Langchain Langchain 0.0.182 Langchain Langchain 0.0.183 Langchain Langchain 0.0.184 Langchain Langchain 0.0.185 Langchain Langchain 0.0.186 Langchain Langchain 0.0.187 Langchain Langchain 0.0.188 Langchain Langchain 0.0.189 Langchain Langchain 0.0.190 Langchain Langchain 0.0.191 Langchain Langchain 0.0.192 Langchain Langchain 0.0.193 Langchain Langchain 0.0.194 Langchain Langchain 0.0.195 Langchain Langchain 0.0.196 Langchain Langchain 0.0.197 Langchain Langchain 0.0.198 Langchain Langchain 0.0.199 Langchain Langchain 0.0.200 Langchain Langchain 0.0.201 Langchain Langchain 0.0.202 Langchain Langchain 0.0.203 Langchain Langchain 0.0.204 Langchain Langchain 0.0.205 Langchain Langchain 0.0.206 Langchain Langchain 0.0.207 Langchain Langchain 0.0.208 Langchain Langchain 0.0.209 Langchain Langchain 0.0.210 Langchain Langchain 0.0.211 Langchain Langchain 0.0.212 Langchain Langchain 0.0.213 Langchain Langchain 0.0.214 Langchain Langchain 0.0.215 Langchain Langchain 0.0.216 Langchain Langchain 0.0.217 Langchain Langchain 0.0.218 Langchain Langchain 0.0.219 Langchain Langchain 0.0.220 Langchain Langchain 0.0.221 Langchain Langchain 0.0.222 Langchain Langchain 0.0.223 Langchain Langchain 0.0.224 Langchain Langchain 0.0.225 Langchain Langchain 0.0.226 Langchain Langchain 0.0.227 Langchain Langchain 0.0.228 Langchain Langchain 0.0.229 Langchain Langchain 0.0.230 Langchain Langchain 0.0.231 Langchain Langchain 0.0.232 Langchain Langchain 0.0.233 Langchain Langchain 0.0.234 Langchain Langchain 0.0.235 Langchain Langchain 0.0.236 Langchain Langchain 0.0.237 Langchain Langchain 0.0.238 Langchain Langchain 0.0.239 Langchain Langchain 0.0.240 Langchain Langchain 0.0.242 Langchain Langchain 0.0.243 Langchain Langchain 0.0.244 Langchain Langchain 0.0.245 Langchain Langchain 0.0.247 Langchain Langchain 0.0.248 Langchain Langchain 0.0.249 Langchain Langchain 0.0.250 Langchain Langchain 0.0.251 Langchain Langchain 0.0.252 Langchain Langchain 0.0.253 Langchain Langchain 0.0.254 Langchain Langchain 0.0.255 Langchain Langchain 0.0.256 Langchain Langchain 0.0.257 Langchain Langchain 0.0.258 Langchain Langchain 0.0.259 Langchain Langchain 0.0.260 Langchain Langchain 0.0.261 Langchain Langchain 0.0.262 Langchain Langchain 0.0.263 Langchain Langchain 0.0.264 Langchain Langchain 0.0.265 Langchain Langchain 0.0.266 Langchain Langchain 0.0.267 Langchain Langchain 0.0.268 Langchain Langchain 0.0.269 Langchain Langchain 0.0.270 Langchain Langchain 0.0.271 Langchain Langchain 0.0.317	220

Summary

Vulnerable Configurations

References