{"data":{"id":"568c384e-f086-41da-8be0-0675a57d8765","title":"GHSA-fv5p-p927-qmxr: LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass","summary":"LangChain Text Splitters before 1.1.2 has an SSRF bypass in HTMLHeaderTextSplitter.split_text_from_url(). The function validates only the initial URL with validate_safe_url() and then calls requests.get() with redirects enabled, so an attacker-controlled server can redirect the fetch to internal, localhost or cloud metadata endpoints such as AWS IMDSv1. Data exfiltration requires the application to return Document contents to the party that supplied the URL.","solution":"Fixed in langchain-text-splitters 1.1.2 (requires langchain-core >= 1.2.31), which replaces requests.get() with the SSRF-safe SSRFSafeSyncTransport from langchain-core that validates DNS results and pins connections on every request, including redirect targets. split_text_from_url() is also deprecated; users should fetch HTML themselves and pass it to split_text().","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-fv5p-p927-qmxr","publishedAt":"2026-04-16T22:53:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-text-splitters@< 1.1.2 (fixed: 1.1.2)"],"affectedPackageNames":["langchain-text-splitters"],"affectedPackageRefs":["pypi:langchain-text-splitters"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangChain","langchain-text-splitters","langchain-core"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-fv5p-p927-qmxr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-16T22:53:32.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}