Lucene search

K
osvGoogleOSV:CVE-2023-36281
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2023-36281

2023-08-2219:16:36
Google
osv.dev
5
langchain
remote attacker
execute arbitrary code
json file
load_prompt
__subclasses__
template
software

AI Score

8.1

Confidence

Low

EPSS

0.031

Percentile

91.2%

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to subclasses or a template.

AI Score

8.1

Confidence

Low

EPSS

0.031

Percentile

91.2%