CVE-2023-29374

creationtimestamp| type| source ---|---|--- 2026-08-17 21:24:42+00:00| seen| https://bsky.app/profile/premarcu.bsky.social/post/3mtcna7rsua2u...

agent-lab-sdk (>=0.1.7, <=0.1.16), arxiv-bot (>=0.0.1, <=0.0.4) +36 more potentially affected by CVE-2023-29374 via langchain (>=0.0.27, <=0.0.131)

langchain PYPI version =0.0.27, =0.1.7, =0.0.1, =0.2.0, =0.15.5, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =1.0.1, =0.0.4, =0.1.0, =0.0.1, =10.8.3, =0.1.3, =0.1.5 and more Source cves: CVE-2023-29374 Source advisory: OSV:GHSA-FPRP-P869-W6Q2...

CVE-2023-29374

CVE-2023-29374 affects LangChain up to version 0.0.131. The vulnerability lies in the LLMMathChain chain, enabling prompt injection that can execute arbitrary Python code via the built-in exec() method. The NVD/CVE data indicate a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network attack...

CVE-2023-29374

In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...

CVE-2023-29374

In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...