https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:04:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0538 certfr-2025-avi-0538 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0538 https://cve.radiocsirt.org/vuln/euvd-2026-2255 EUVD-2026-2255 https://cve.radiocsirt.org/vuln/euvd-2026-2255 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3571 <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3571 https://cve.radiocsirt.org/vuln/ghsa-rgp8-pm28-3759 <p><strong>Affected:</strong> PyPI: langchain</p> <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> <p><strong>Affected:</strong> PyPI: langchain</p> <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> https://cve.radiocsirt.org/vuln/ghsa-rgp8-pm28-3759 https://cve.radiocsirt.org/vuln/gsd-2024-3571 gsd-2024-3571 https://cve.radiocsirt.org/vuln/gsd-2024-3571 https://cve.radiocsirt.org/vuln/pysec-2026-1510 <p><strong>Affected:</strong> PyPI: langchain</p> <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> <p><strong>Affected:</strong> PyPI: langchain</p> <p>langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to information disclosure or remote code execution. The issue lies in the handling of file paths in the mset and mget methods, where user-supplied input is not adequately sanitized, allowing directory traversal sequences to reach unintended directories.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1510