{"data":{"ecosystem":"pypi","name":"langroid","url":"https://aisecwatch.com/packages/pypi/langroid","latestVersion":"0.69.2","firstReleaseAt":"2023-07-14T20:38:04.265Z","repository":null,"llm":{"exposure":"direct","depth":0,"integratedAt":"2023-07-14T20:38:04.265Z","integratedVersion":"0.1.8","sdks":["langroid"],"path":[]},"authority":{"profile":["http","mcp_tools"],"fromDependencies":["pypi:aiohttp","pypi:fastmcp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"chainlit","versionSpec":"<3.0.0,>=2.0.1","scope":"extra:all"},{"ecosystem":"pypi","name":"chromadb","versionSpec":"<=0.4.23,>=0.4.21","scope":"extra:all"},{"ecosystem":"pypi","name":"crawl4ai","versionSpec":">=0.6.3","scope":"extra:crawl4ai"},{"ecosystem":"pypi","name":"exa-py","versionSpec":">=1.8.7","scope":"runtime"},{"ecosystem":"pypi","name":"fastembed","versionSpec":"<0.4.0,>=0.3.1","scope":"extra:all"},{"ecosystem":"pypi","name":"fastmcp","versionSpec":">=2.2.5","scope":"runtime"},{"ecosystem":"pypi","name":"google-genai","versionSpec":">=1.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"groq","versionSpec":"<1.0.0,>=0.13.0","scope":"runtime"},{"ecosystem":"pypi","name":"huggingface-hub","versionSpec":"<1.0.0,>=0.21.2","scope":"extra:all"},{"ecosystem":"pypi","name":"lancedb","versionSpec":">=0.9.0","scope":"extra:lancedb"},{"ecosystem":"pypi","name":"litellm","versionSpec":"<2.0.0,>=1.30.1","scope":"extra:all"},{"ecosystem":"pypi","name":"marker-pdf","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"openai","versionSpec":"<4.0.0,>=1.106.0","scope":"runtime"},{"ecosystem":"pypi","name":"pgvector","versionSpec":">=0.3.6","scope":"extra:all"},{"ecosystem":"pypi","name":"pinecone-client","versionSpec":">=5.0.1","scope":"extra:pinecone"},{"ecosystem":"pypi","name":"pymilvus","versionSpec":">=3.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"qdrant-client","versionSpec":"<2.0.0,>=1.8.0","scope":"runtime"},{"ecosystem":"pypi","name":"sentence-transformers","versionSpec":"<3.0.0,>=2.2.2","scope":"extra:all"},{"ecosystem":"pypi","name":"transformers","versionSpec":"<5.0.0,>=4.40.1","scope":"extra:all"},{"ecosystem":"pypi","name":"unstructured","versionSpec":"<1.0.0,>=0.16.15","scope":"extra:all"},{"ecosystem":"pypi","name":"weaviate-client","versionSpec":">=4.9.6","scope":"extra:all"},{"ecosystem":"pypi","name":"adb-cloud-connector","versionSpec":"<2.0.0,>=1.0.2","scope":"runtime"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":"<4.0.0,>=3.9.1","scope":"runtime"},{"ecosystem":"pypi","name":"arango-datasets","versionSpec":"<2.0.0,>=1.2.2","scope":"extra:all"},{"ecosystem":"pypi","name":"async-generator","versionSpec":"<2.0,>=1.10","scope":"runtime"},{"ecosystem":"pypi","name":"asyncio","versionSpec":">=3.4.3","scope":"extra:asyncio"},{"ecosystem":"pypi","name":"bs4","versionSpec":"<1.0.0,>=0.0.1","scope":"runtime"},{"ecosystem":"pypi","name":"cerebras-cloud-sdk","versionSpec":"<2.0.0,>=1.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"colorlog","versionSpec":"<7.0.0,>=6.7.0","scope":"runtime"},{"ecosystem":"pypi","name":"docling","versionSpec":"<3.0.0,>=2.20.0","scope":"extra:all"},{"ecosystem":"pypi","name":"docstring-parser","versionSpec":"<1.0,>=0.16","scope":"runtime"},{"ecosystem":"pypi","name":"duckduckgo-search","versionSpec":"<7.0.0,>=6.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"faker","versionSpec":"<19.0.0,>=18.9.0","scope":"runtime"},{"ecosystem":"pypi","name":"fakeredis","versionSpec":"<3.0.0,>=2.12.1","scope":"runtime"},{"ecosystem":"pypi","name":"fire","versionSpec":"<1.0.0,>=0.5.0","scope":"runtime"},{"ecosystem":"pypi","name":"firecrawl-py","versionSpec":"<5.0.0,>=4.46.0","scope":"extra:firecrawl"},{"ecosystem":"pypi","name":"gitpython","versionSpec":"<4.0.0,>=3.1.43","scope":"runtime"},{"ecosystem":"pypi","name":"google-api-python-client","versionSpec":"<3.0.0,>=2.95.0","scope":"runtime"},{"ecosystem":"pypi","name":"grpcio","versionSpec":"<2.0.0,>=1.62.1","scope":"runtime"},{"ecosystem":"pypi","name":"halo","versionSpec":"<1.0.0,>=0.0.31","scope":"runtime"},{"ecosystem":"pypi","name":"jinja2","versionSpec":"<4.0.0,>=3.1.2","scope":"runtime"},{"ecosystem":"pypi","name":"json-repair","versionSpec":"<0.61.3,>=0.29.9","scope":"runtime"},{"ecosystem":"pypi","name":"lxml","versionSpec":"<7.0.0,>=6.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"markdownify","versionSpec":">=0.13.1","scope":"runtime"},{"ecosystem":"pypi","name":"markitdown","versionSpec":">=0.0.1a3","scope":"extra:doc-parsers"},{"ecosystem":"pypi","name":"meilisearch-python-sdk","versionSpec":"<3.0.0,>=2.2.3","scope":"extra:meilisearch"},{"ecosystem":"pypi","name":"metaphor-python","versionSpec":"<0.2.0,>=0.1.23","scope":"extra:all"},{"ecosystem":"pypi","name":"neo4j","versionSpec":"<6.0.0,>=5.14.1","scope":"extra:all"},{"ecosystem":"pypi","name":"nest-asyncio","versionSpec":"<2.0.0,>=1.6.0","scope":"runtime"},{"ecosystem":"pypi","name":"nltk","versionSpec":"<4.0.0,>=3.8.2","scope":"runtime"},{"ecosystem":"pypi","name":"onnxruntime","versionSpec":"<2.0.0,>=1.16.1","scope":"runtime"},{"ecosystem":"pypi","name":"opencv-python","versionSpec":">=4.11.0.86","scope":"extra:marker-pdf"},{"ecosystem":"pypi","name":"openpyxl","versionSpec":">=3.1.5","scope":"extra:doc-parsers"},{"ecosystem":"pypi","name":"pandas","versionSpec":"<3.0.0,>=2.0.3","scope":"runtime"},{"ecosystem":"pypi","name":"pdf2image","versionSpec":"<2.0.0,>=1.17.0","scope":"extra:all"},{"ecosystem":"pypi","name":"prettytable","versionSpec":"<4.0.0,>=3.8.0","scope":"runtime"},{"ecosystem":"pypi","name":"psycopg2","versionSpec":"<3.0.0,>=2.9.7","scope":"extra:all"},{"ecosystem":"pypi","name":"psycopg2-binary","versionSpec":">=2.9.10","scope":"extra:all"},{"ecosystem":"pypi","name":"pyarrow","versionSpec":">=15.0.0","scope":"extra:lancedb"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"<3.0.0,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic-settings","versionSpec":"<3.0.0,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pygithub","versionSpec":"<2.0.0,>=1.58.1","scope":"runtime"},{"ecosystem":"pypi","name":"pygments","versionSpec":"<3.0.0,>=2.15.1","scope":"runtime"},{"ecosystem":"pypi","name":"pymupdf","versionSpec":"<2.0.0,>=1.23.3","scope":"extra:all"},{"ecosystem":"pypi","name":"pymupdf4llm","versionSpec":"<0.1.0,>=0.0.17","scope":"extra:all"},{"ecosystem":"pypi","name":"pymysql","versionSpec":"<2.0.0,>=1.1.0","scope":"extra:all"},{"ecosystem":"pypi","name":"pyparsing","versionSpec":"<4.0.0,>=3.0.9","scope":"runtime"},{"ecosystem":"pypi","name":"pypdf","versionSpec":">=5.1.0","scope":"extra:all"},{"ecosystem":"pypi","name":"pypdfium2","versionSpec":"<5.0.0,>=4.30.0","scope":"runtime"},{"ecosystem":"pypi","name":"pytesseract","versionSpec":"<0.4.0,>=0.3.10","scope":"extra:all"},{"ecosystem":"pypi","name":"pytest-rerunfailures","versionSpec":"<16.0,>=15.0","scope":"runtime"},{"ecosystem":"pypi","name":"python-arango","versionSpec":"<9.0.0,>=8.1.2","scope":"extra:all"},{"ecosystem":"pypi","name":"python-docx","versionSpec":"<2.0.0,>=1.1.0","scope":"extra:all"},{"ecosystem":"pypi","name":"python-dotenv","versionSpec":"<2.0.0,>=1.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"python-magic","versionSpec":"<1.0.0,>=0.4.27","scope":"runtime"},{"ecosystem":"pypi","name":"python-pptx","versionSpec":">=1.0.2","scope":"extra:doc-parsers"},{"ecosystem":"pypi","name":"python-socketio","versionSpec":"<6.0.0,>=5.11.0","scope":"extra:all"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":"<7.0.0,>=6.0.1","scope":"runtime"},{"ecosystem":"pypi","name":"rank-bm25","versionSpec":"<1.0.0,>=0.2.2","scope":"runtime"},{"ecosystem":"pypi","name":"redis","versionSpec":"<6.0.0,>=5.0.1","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":"<3.0.0,>=2.31.0","scope":"runtime"},{"ecosystem":"pypi","name":"requests-oauthlib","versionSpec":"<2.0.0,>=1.3.1","scope":"runtime"},{"ecosystem":"pypi","name":"rich","versionSpec":"<14.0.0,>=13.3.4","scope":"runtime"},{"ecosystem":"pypi","name":"scrapy","versionSpec":"<3.0.0,>=2.11.0","scope":"extra:scrapy"},{"ecosystem":"pypi","name":"seltz","versionSpec":">=0.2.0","scope":"extra:all"},{"ecosystem":"pypi","name":"sqlalchemy","versionSpec":"<3.0.0,>=2.0.19","scope":"extra:all"},{"ecosystem":"pypi","name":"sqlglot","versionSpec":">=23.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"tantivy","versionSpec":"<0.22.0,>=0.21.0","scope":"extra:lancedb"},{"ecosystem":"pypi","name":"tavily-python","versionSpec":">=0.5.0","scope":"extra:tavily"},{"ecosystem":"pypi","name":"thefuzz","versionSpec":"<1.0.0,>=0.20.0","scope":"runtime"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":"<1.0.0,>=0.7.0","scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":"<3.0.0,>=2.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"trafilatura","versionSpec":"<3.0.0,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"typer","versionSpec":"<1.0.0,>=0.9.0","scope":"runtime"},{"ecosystem":"pypi","name":"wget","versionSpec":"<4.0,>=3.2","scope":"runtime"},{"ecosystem":"pypi","name":"xlrd","versionSpec":">=2.0.1","scope":"extra:doc-parsers"}],"advisories":[{"id":"1afddd65-7822-4895-a480-ccf8d38882b8","url":"https://aisecwatch.com/issues/1afddd65-7822-4895-a480-ccf8d38882b8","cveId":"CVE-2026-55615","title":"GHSA-2pq5-3q89-j7cc: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879","headline":null,"severity":"critical","publishedAt":"2026-07-06T21:22:43.000Z","affected":["langroid@<= 0.65.4 (fixed: 0.65.5)"],"epssScore":0.00461},{"id":"312ef2f5-08f0-4799-8593-60ac07e191a3","url":"https://aisecwatch.com/issues/312ef2f5-08f0-4799-8593-60ac07e191a3","cveId":"CVE-2026-54771","title":"GHSA-gjgq-w2m6-wr5q: Langroid: handle_message() executes user-supplied tool JSON without sender verification ","headline":null,"severity":"high","publishedAt":"2026-07-06T20:42:18.000Z","affected":["langroid@<= 0.65.2 (fixed: 0.65.3)"],"epssScore":0.00392},{"id":"fcb610fa-a5cf-4dbf-a3cf-60a372a488b1","url":"https://aisecwatch.com/issues/fcb610fa-a5cf-4dbf-a3cf-60a372a488b1","cveId":"CVE-2026-54769","title":"GHSA-q9p7-wqxg-mrhc: Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent","headline":null,"severity":"critical","publishedAt":"2026-07-06T20:42:00.000Z","affected":["langroid@<= 0.65.1 (fixed: 0.65.2)"],"epssScore":0.00912},{"id":"5b95cfd3-c74b-41dc-9451-7cf667a51e5c","url":"https://aisecwatch.com/issues/5b95cfd3-c74b-41dc-9451-7cf667a51e5c","cveId":"CVE-2026-54760","title":"GHSA-6xc5-4r68-67fc: Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls","headline":null,"severity":"critical","publishedAt":"2026-07-06T20:39:02.000Z","affected":["langroid@<= 0.65.0 (fixed: 0.65.1)"],"epssScore":0.00646},{"id":"2a574121-bb1a-4e69-a935-7fc1ffd6ba11","url":"https://aisecwatch.com/issues/2a574121-bb1a-4e69-a935-7fc1ffd6ba11","cveId":"CVE-2026-50180","title":"GHSA-pmch-g965-grmr: Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read","headline":null,"severity":"high","publishedAt":"2026-07-02T17:42:09.000Z","affected":["langroid@<= 0.63.0 (fixed: 0.64.0)"],"epssScore":0.00686},{"id":"25b29257-6e61-442a-9fe2-ab6a884a2df0","url":"https://aisecwatch.com/issues/25b29257-6e61-442a-9fe2-ab6a884a2df0","cveId":"CVE-2026-50181","title":"GHSA-fg23-3346-88f5: Langroid: Path traversal in the file tools allows read/write outside configured current directory","headline":null,"severity":"high","publishedAt":"2026-07-02T17:38:03.000Z","affected":["langroid@<= 0.63.0 (fixed: 0.64.0)"],"epssScore":0.00184},{"id":"6e83adb8-c96c-4418-8ad4-d3b89ff2619d","url":"https://aisecwatch.com/issues/6e83adb8-c96c-4418-8ad4-d3b89ff2619d","cveId":"CVE-2026-25879","title":"GHSA-mxfr-6hcw-j9rq: Langroid has Prompt to SQL Injection, Leading to RCE","headline":null,"severity":"critical","publishedAt":"2026-05-27T19:38:58.000Z","affected":["langroid@< 0.63.0 (fixed: 0.63.0)"],"epssScore":0.00695},{"id":"ad54c873-4174-4ce5-bb12-07f7a5020b09","url":"https://aisecwatch.com/issues/ad54c873-4174-4ce5-bb12-07f7a5020b09","cveId":"CVE-2026-25481","title":"GHSA-x34r-63hx-w57f: Langroid has WAF Bypass Leading to RCE in TableChatAgent","headline":null,"severity":"critical","publishedAt":"2026-02-02T20:42:28.000Z","affected":["langroid@<= 0.59.31 (fixed: 0.59.32)"],"epssScore":0.00817},{"id":"01f89e2e-0b6e-45a0-b94b-b52ec2ce54a6","url":"https://aisecwatch.com/issues/01f89e2e-0b6e-45a0-b94b-b52ec2ce54a6","cveId":"CVE-2025-46725","title":"CVE-2025-46725: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15…","headline":"Langroid LanceDocChatAgent code execution via pandas eval","severity":"critical","publishedAt":"2025-05-20T18:15:46.580Z","affected":["langroid@< 0.53.15 (fixed: 0.53.15)"],"epssScore":0.00531},{"id":"3fdddc79-da6c-400b-9a7c-933c235867ae","url":"https://aisecwatch.com/issues/3fdddc79-da6c-400b-9a7c-933c235867ae","cveId":"CVE-2025-46724","title":"CVE-2025-46724: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15…","headline":"Langroid TableChatAgent code injection through pandas eval()","severity":"critical","publishedAt":"2025-05-20T18:15:46.430Z","affected":["langroid@< 0.53.15 (fixed: 0.53.15)"],"epssScore":0.00825},{"id":"957a0f6f-3e0e-4d54-9c76-4451754f98aa","url":"https://aisecwatch.com/issues/957a0f6f-3e0e-4d54-9c76-4451754f98aa","cveId":"CVE-2025-46726","title":"GHSA-pw95-88fg-3j6f: Langroid Allows XXE Injection via XMLToolMessage","headline":null,"severity":"high","publishedAt":"2025-05-05T20:40:44.000Z","affected":["langroid@< 0.53.4 (fixed: 0.53.4)"],"epssScore":0.00648}],"checkedAt":"2026-10-09T21:55:05.318Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}