67 matches found
CVE-2023-38860
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...
PYSEC-2023-110
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
PT-2023-27040
Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.245 through 0.0.307 Description The issue is related to incorrect code generation control in the numexpr library of the LangChain framework, allowing a remote attacker to execute arbitrary code via the evaluate function...