CVE-2024-58340 | langchain-ai LangChain up to 0.3.1 output_parser.py MRKLOutputparser.parse redos

January 13, 2026 Yanac

A vulnerability described as problematic has been identified in langchain-ai LangChain up to 0.3.1. The impacted element is the function MRKLOutputparser.parse in the library libs/LangChain/LangChain/agents/mrkl/output_parser.py. Executing a manipulation can lead to inefficient regular expression complexity.

The identification of this vulnerability is CVE-2024-58340. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More