LangChain 代码注入漏洞

LangChain builds applications using LLM through composability. A code injection vulnerability exists in LangChain version v.0.0.171 that could allow a remote attacker to execute arbitrary code via a json file and the loadprompt parameter...

PT-2023-25510 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...

GHSA-6643-H7H5-X9WH Langchain vulnerable to arbitrary code execution

Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...

CVE-2023-34541

Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...

CVE-2023-34541

Langchain 0.0.171 is vulnerable to arbitrary code execution via load_prompt. The CVE-2023-34541 entry shows a CRITICAL CVSS v3.1 score (9.8) with NETWORK attack vector, no authentication, and high impact on confidentiality, integrity, and availability. A Proof-of-Concept exploit is indicated in t...

LangChain 安全漏洞

LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...

PT-2023-24914 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: Langchain version 0.0.171 Description: The issue concerns arbitrary code execution in the load prompt function. This allows for potentially malicious code to be executed, posing a significant risk. Recommendations: For Langchain version...

PYSEC-2023-91

Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...

Langchain 安全漏洞

LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...

CVE-2023-34540

Summary: Langchain before v0.0.225 contains a remote code execution vulnerability in the JiraAPIWrapper. The flaw allows an attacker to execute arbitrary code via crafted input in the wrapper component. A fix is available, referenced by the v0.0.225 release notes. Affected scope (from connected d...