CVE-2025-6984High· 7.5▾ TwilightAn XML External Entity flaw has been discovered in the langchain-community python package. The EverNoteLoader component has an insecure use of the `etree.iterparse()` function which does not disable external entity references. This can lea…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
1.5%
1.5% → 1.7%
Last analysed / modified upstream
An XML External Entity flaw has been discovered in the langchain-community python package. The EverNoteLoader component has an insecure use of the etree.iterparse() function which does not disable external entity references. This can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data
langchain-community: Langchain-community insecure XML parsing — rated Important by Red Hat. Released 2025-09-04, updated 2026-10-15.
Affected:
Fixed:
No fix planned:
Not affected:
Red Hat Ansible Automation Platform https://access.redhat.com/errata/RHSA-2025:16514
Workarounds / mitigations:
Affected packages:
langchain-community < 0.3.27Patched in:
langchain-community 0.3.27Connected by shared product, vendor, weakness, or advisory.
CVE-2025-64460High· 7.5Django: Django: Algorithmic complexity in XML Deserializer leads to denial of service (CVE-2025-64460)
CVE-2026-39373High· 7.5JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens (CVE-2026-39373)
CVE-2021-38554Medium· 5.3vault: UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser (CVE-2021-38554)
CVE-2025-59530Medium· 5.3github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame (CVE-2025-59530)
CVE-2021-41092High· 7.5docker: cli leaks private registry credentials to registry-1.docker.io (CVE-2021-41092)
CVE-2026-116190Low· 3.7github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects (CVE-2026-116190)