-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the parse_sitemap method's recursive processing of sitemap entries. The original implementation (pre-patch) lacked a recursion depth limit, as shown in the commit diff where a 'max_depth' parameter and depth tracking were added. The recursive call to parse_sitemap without depth control could create infinite loops when circular sitemap references exist, matching the CWE-674 (Uncontrolled Recursion) and CWE-400 (Resource Consumption) descriptions in the advisory.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| langchain-community | pip | < 0.2.5 | 0.2.5 |
| langchain | pip | >= 0, < 0.2.5 | 0.2.5 |