Lucene search

K
osvGoogleOSV:CVE-2023-32786
HistoryOct 20, 2023 - 10:15 p.m.

CVE-2023-32786

2023-10-2022:15:10
Google
osv.dev
5
langchain
prompt injection
ssrf
content injection

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

40.6%

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

40.6%