CVE-2023-34540: Langchain

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available.

Affected products

• Langchain Langchain: version 0.0.171 only

Published 2023-06-14. Last modified 2026-06-17.