MIT
All Versions
Vulnerabilities (Public)
Known vulnerabilities and security issues detected in the extension's dependencies and code.
| Vulnerability ID | Advisory | Affected Versions | |||
|---|---|---|---|---|---|
| CVE-2026-55615 | langroid – Improper Neutralization of Special Elements in Output | Critical | – | – | <= 0.65.4 |
| CVE-2026-54769 | langroid – Code Injection | Critical | – | – | <= 0.65.1 |
| CVE-2026-54760 | langroid – Path Traversal | Critical | – | – | <= 0.65.0 |
| CVE-2026-25879 | Affected versions of the langroid package are vulnerable to SQL Injection leading to Remote Code Execution due to the absence of query validation in the SQLChatAgent component. The run_query method in… | Critical | – | – | <0.63.0 |
| CVE-2026-25481 | Affected versions of the langroid package are vulnerable to Remote Code Execution due to an incomplete WAF used to restrict pandas expression evaluation. The TableChatAgent pandas_eval tool in langroi… | Critical | – | – | <0.59.32 |
| CVE-2025-46724 | Affected versions of Langroid are vulnerable to Code Injection when using TableChatAgent. TableChatAgent uses pandas eval(). If fed by untrusted user input, like the case of a public-facing LLM applic… | Critical | – | – | <0.53.15 |
| CVE-2026-54771 | langroid – Improper Neutralization of Special Elements in Output | High | – | – | <= 0.65.2 |
| CVE-2026-50180 | langroid – Path Traversal | High | – | – | <= 0.63.0 |
| CVE-2026-50181 | langroid – Path Traversal | High | – | – | <= 0.63.0 |
| CVE-2025-46725 | Affected versions of Langroid are vulnerable to Code Injection when using LanceDocChatAgent. LanceDocChatAgent uses pandas eval() through compute_from_docs(). As a result, an attacker may be able to m… | High | – | – | <0.53.15 |
Page 1
Safety Discovered Vulnerabilities
Additional security issues found by Safety, exclusive to our platform.