LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurl_loader.py because crawling can proceed from an external server to an internal server.
"https://github.com/pypa/advisory-database/blob/main/vulns/langchain/PYSEC-2023-205.yaml"