https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:05:08.263403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-1827 EUVD-2026-1827 2026-10-03T10:05:08.357932+00:00 EUVD-2026-1827 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2057 fkie_cve-2024-2057 2026-10-03T10:05:08.357970+00:00

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-255372.

 https://cve.radiocsirt.org/vuln/ghsa-vpff-m9vh-pv4h GHSA-vpff-m9vh-pv4h 2026-10-03T10:05:08.358005+00:00

A vulnerability was found in Harrison Chase LangChain 0.1.9. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255372.

 https://cve.radiocsirt.org/vuln/gsd-2024-2057 gsd-2024-2057 2026-10-03T10:05:08.358023+00:00 gsd-2024-2057 https://cve.radiocsirt.org/vuln/pysec-2024-278 PYSEC-2024-278 2026-10-03T10:05:08.358034+00:00

Affected: PyPI: langchain-community

A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.27 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-255372.