Lucene search

langchain-experimental vulnerable to Arbitrary Code Execution

🗓️ 15 Jul 2024 06:53:30Reported by GoogleType

osv🔗 osv.dev👁 11 Views

langchain-experimental 0.0.15-0.0.21 Arbitrary Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2024-21513	15 Jul 202405:00	–	cvelist
CVE	CVE-2024-21513	15 Jul 202405:15	–	cve
Veracode	Code Injection	16 Jul 202405:59	–	veracode
OSV	CVE-2024-21513	15 Jul 202405:15	–	osv
OSV	PYSEC-2024-62	15 Jul 202405:15	–	osv
NVD	CVE-2024-21513	15 Jul 202405:15	–	nvd
Vulnrichment	CVE-2024-21513	15 Jul 202405:00	–	vulnrichment
Github Security Blog	langchain-experimental vulnerable to Arbitrary Code Execution	15 Jul 202406:30	–	github

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21513
github	www.github.com/langchain-ai/langchain/commit/7b13292e3544b2f5f2bfb8a27a062ea2b0c34561
github	www.github.com/langchain-ai/langchain
github	www.github.com/langchain-ai/langchain/blob/672907bbbb7c38bf19787b78e4ffd7c8a9026fe4/libs/experimental/langchain_experimental/sql/vector_sql.py
github	www.github.com/langchain-ai/langchain/blob/672907bbbb7c38bf19787b78e4ffd7c8a9026fe4/libs/experimental/langchain_experimental/sql/vector_sql.py%23L81
github	www.github.com/pypa/advisory-database/tree/main/vulns/langchain-experimental/PYSEC-2024-62.yaml
security	www.security.snyk.io/vuln/SNYK-PYTHON-LANGCHAINEXPERIMENTAL-7278171

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jul 2024 06:30Current

8.4High risk

Vulners AI Score8.4

CVSS38.5

EPSS0.001