agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +353 more potentially affected by CVE-2024-3571 via langchain (>=0.0.27, <=0.0.352)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.8.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2024-3571 Source advisory: OSV:PYSEC-2026-1510...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +353 more potentially affected by CVE-2024-3571 via langchain (>=0.0.27, <=0.0.352)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.8.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2024-3571 Source advisory: OSV:GHSA-RGP8-PM28-3759...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +353 more potentially affected by CVE-2024-3571 via langchain (>=0.0.27, <=0.0.352)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.8.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2024-3571 Source advisory: GHSA-RGP8-PM28-3759...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +353 more potentially affected by CVE-2024-3571 via langchain (>=0.0.27, <=0.0.352)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.8.0, =0.0.1, =0.1.8, =0.1.12 and more Source cves: CVE-2024-3571 Source advisory: MEND:CVE-2024-3571...

CVE-2024-3571 Path Traversal in langchain-ai/langchain

langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory 'Path Traversal' in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to...