Vulnerabilities for langchain-text-splitters

First version without a known vulnerability: 1.1.2

Details

• GHSA-fv5p-p927-qmxr2026-04-16

  LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

  Fixed in: 1.1.2

• GHSA-m42m-m8cr-8m582025-10-06

  LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

  Fixed in: 0.3.9