PT-2026-59218 · Pypi · Langchain-Community
Published
2026-07-13
·
Updated
2026-07-13
CVSS v3.1
4.2
Medium
| Vector | AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Denial of service in
SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parse sitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap itself. This oversight allows for the possibility of an infinite loop, leading to a crash by exceeding the maximum recursion depth in Python. This vulnerability can be exploited to occupy server socket/port resources and crash the Python process, impacting the availability of services relying on this functionality.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Langchain-Community