Issue Station
Sign In
Tools hereToolbox

langchain - 💡(How to fix) Fix Backport HTMLHeaderTextSplitter SSRF redirect-bypass fix (CVE-2026-41481) to the v0.3 branch

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

The published advisory for HTMLHeaderTextSplitter.split_text_from_url lists no patched 0.3.x version:

  • CVE-2026-41481 / GHSA-fv5p-p927-qmxr — HTMLHeaderTextSplitter.split_text_from_url follows redirects without re-validating the target host, so the SSRF check on the user-supplied URL can be bypassed by redirecting to a private / metadata endpoint.
CVElangchain-text-splitters patched
CVE-2026-41481>=1.1.2 (no 0.3.x)

The current v0.3 langchain-text-splitters (0.3.11) calls requests.get(url) without an SSRF policy. Users on the v0.3 line cannot pick up the fix without upgrading to 1.x, which may not be feasible for applications still on the legacy langchain-core 0.3.x chain.

Root Cause

The published advisory for HTMLHeaderTextSplitter.split_text_from_url lists no patched 0.3.x version:

  • CVE-2026-41481 / GHSA-fv5p-p927-qmxr — HTMLHeaderTextSplitter.split_text_from_url follows redirects without re-validating the target host, so the SSRF check on the user-supplied URL can be bypassed by redirecting to a private / metadata endpoint.
CVElangchain-text-splitters patched
CVE-2026-41481>=1.1.2 (no 0.3.x)

The current v0.3 langchain-text-splitters (0.3.11) calls requests.get(url) without an SSRF policy. Users on the v0.3 line cannot pick up the fix without upgrading to 1.x, which may not be feasible for applications still on the legacy langchain-core 0.3.x chain.

Fix Action

Fix / Workaround

The published advisory for HTMLHeaderTextSplitter.split_text_from_url lists no patched 0.3.x version:

CVElangchain-text-splitters patched
CVE-2026-41481>=1.1.2 (no 0.3.x)
RAW_BUFFERClick to expand / collapse

Summary

The published advisory for HTMLHeaderTextSplitter.split_text_from_url lists no patched 0.3.x version:

  • CVE-2026-41481 / GHSA-fv5p-p927-qmxr — HTMLHeaderTextSplitter.split_text_from_url follows redirects without re-validating the target host, so the SSRF check on the user-supplied URL can be bypassed by redirecting to a private / metadata endpoint.
CVElangchain-text-splitters patched
CVE-2026-41481>=1.1.2 (no 0.3.x)

The current v0.3 langchain-text-splitters (0.3.11) calls requests.get(url) without an SSRF policy. Users on the v0.3 line cannot pick up the fix without upgrading to 1.x, which may not be feasible for applications still on the legacy langchain-core 0.3.x chain.

Proposed change

Backport upstream PR #36821 (fix(text-splitters): deprecate and use SSRF-safe transport in split_text_from_url) onto the v0.3 branch. The fix uses langchain_core._security._transport.ssrf_safe_client introduced in the same upstream chain that #37298 ports to v0.3.

Dependency

Requires #37299 / #37298 (the SSRF-module backport) to land on v0.3 first, since the text-splitters fix imports langchain_core._security._transport.

Pattern

Same per-CVE v0.3 security-backport pattern as recent merged PRs:

  • #37233 — fix(core): backport path-traversal fix to v0.3 (CVE-2026-34070)
  • #37239 — chore(langchain): backport loads/dumps harden to v0.3 and deprecate hub
  • #37201 — fix(core, langchain): harden load() against untrusted manifests
  • #37209 — fix(langchain): restrict deserialization in langchain.storage._lc_store

Related PR

Branch will be ready once the SSRF-module backport (#37298) lands on v0.3.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#ssr#search optimization#API routing#API middleware#SSR setup

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

langchain - 💡(How to fix) Fix Backport HTMLHeaderTextSplitter SSRF redirect-bypass fix (CVE-2026-41481) to the v0.3 branch