{"data":{"ecosystem":"pypi","name":"langchain-text-splitters","url":"https://aisecwatch.com/packages/pypi/langchain-text-splitters","latestVersion":"1.1.3","firstReleaseAt":"2024-03-01T02:38:02.444Z","repository":"https://github.com/langchain-ai/langchain","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-03-01T02:38:02.444Z","integratedVersion":"0.0.1","sdks":["langchain"],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"langchain-core","versionSpec":"<2.0.0,>=1.4.7","scope":"runtime"}],"advisories":[{"id":"d451ebf2-1b7f-4b71-8446-b5b63e38c44d","url":"https://aisecwatch.com/issues/d451ebf2-1b7f-4b71-8446-b5b63e38c44d","cveId":"CVE-2026-41481","title":"CVE-2026-41481: LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2…","headline":"langchain-text-splitters SSRF via redirects in HTMLHeaderTextSplitter","severity":"medium","publishedAt":"2026-04-24T21:16:19.490Z","affected":["langchain-text-splitters@< 1.1.2 (fixed: 1.1.2)"],"epssScore":0.00436,"matchedBy":"ecosystem"},{"id":"568c384e-f086-41da-8be0-0675a57d8765","url":"https://aisecwatch.com/issues/568c384e-f086-41da-8be0-0675a57d8765","cveId":null,"title":"GHSA-fv5p-p927-qmxr: LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass","headline":null,"severity":"medium","publishedAt":"2026-04-16T22:53:32.000Z","affected":["langchain-text-splitters@< 1.1.2 (fixed: 1.1.2)"],"epssScore":null,"matchedBy":"ecosystem"},{"id":"3e5e2430-fc11-4d9a-9a1e-695af0c87b70","url":"https://aisecwatch.com/issues/3e5e2430-fc11-4d9a-9a1e-695af0c87b70","cveId":"CVE-2025-6985","title":"CVE-2025-6985: The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE)…","headline":"HTMLSectionSplitter in langchain-text-splitters XXE via unsafe XSLT parsing","severity":"high","publishedAt":"2025-10-06T22:15:52.857Z","affected":["langchain-text-splitters@< 0.3.9 (fixed: 0.3.9)"],"epssScore":0.00508,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:51:09.306Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}