langchain-ai v0351 was discovered to contain an indirect prompt injection vulnerability in the

链接： https://github.com/advisories/GHSA-3g6x-vq45-v2jv

CVSS 评分： 9.8

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2025-46059

• https://github.com/langchain-ai/langchain/issues/30833

• https://github.com/Jr61-star/CVEs/blob/main/CVE-2025-46059.md

• https://github.com/advisories/GHSA-3g6x-vq45-v2jv

描述：

langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message.