7 matches found
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
Code injection
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
PYSEC-2023-163
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
CVE-2023-39631
LangChain (Langchain) v0.0.245 contains a remote code execution vulnerability in the evaluate function via the numexpr library. Root cause: improper neutralization/input handling in the evaluate path, enabling arbitrary code execution. Affected component/function: Langchain’s evaluate using numex...
