{"data":{"id":"531a569d-bd6c-49c1-8d93-f5e6cd045c71","title":"CVE-2024-58340: LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in…","summary":"LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) flaw in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser runs a backtracking-prone regular expression when extracting tool actions from model output, so an attacker who can supply or influence the parsed text, for example through prompt injection in downstream applications that pass LLM output directly into the parser, can cause excessive CPU consumption and significant parsing delays.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-58340","publishedAt":"2026-01-13T04:15:51.780Z","cveId":"CVE-2024-58340","cweIds":["CWE-1333"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","MRKLOutputParser"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain ReDoS in MRKLOutputParser.parse() via crafted model output","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00481,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-pq2w-3m7x-qx76"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:45.870Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}