1912 matches found
LangChain Experimental Python Library <= 0.0.14 (CVE-2023-44467)
LangChain is a framework for developing applications powered by large language models. langchainexperimental aka LangChain Experimental in LangChain = 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by...
LangChain Python Library < 0.0.317 (CVE-2023-46229)
LangChain is a framework for developing applications powered by large language models. LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurlloader.py because crawling can proceed from an external server to an internal server. Note that Nessus has not tested for this issue but has...
LangChain Detection
Binary data pythonlangchaindetect.nbin...
Code Injection
langchain-experimental is vulnerable to Code Injection. The vulnerability is due to the use of 'eval' on all retrieved values from the database when the server is configured with VectorSQLDatabaseChain...
drama-agent (>=0.1.1, <=0.1.4), kube-copilot (>=0.1.21, <=0.1.22) +2 more potentially affected by CVE-2024-21513 via langchain-experimental (>=0.0.8, <=0.0.14)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.21, =0.0.13, =0.0.18 - myevery 0.0.11 Source cves: CVE-2024-21513 Source advisory: OSV:GHSA-CGCG-P68Q-3W7V...
drama-agent (>=0.1.1, <=0.1.4), kube-copilot (>=0.1.21, <=0.1.22) +2 more potentially affected by CVE-2024-21513 via langchain-experimental (>=0.0.8, <=0.0.14)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.21, =0.0.13, =0.0.18 - myevery 0.0.11 Source cves: CVE-2024-21513 Source advisory: GHSA-CGCG-P68Q-3W7V...
GHSA-CGCG-P68Q-3W7V langchain-experimental vulnerable to Arbitrary Code Execution
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
PYSEC-2024-62
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
PYSEC-2024-62
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
drama-agent (>=0.1.1, <=0.1.4), kube-copilot (>=0.1.21, <=0.1.22) +2 more potentially affected by CVE-2024-21513 via langchain-experimental (>=0.0.8, <=0.0.14)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.21, =0.0.13, =0.0.18 - myevery 0.0.11 Source cves: CVE-2024-21513 Source advisory: OSV:PYSEC-2024-62...
CVE-2024-21513
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
CVE-2024-21513
langchain-experimental versions 0.0.15 and earlier than 0.0.21 are vulnerable to Arbitrary Code Execution via eval() on database-retrieved values when using VectorSQLDatabaseChain. The vulnerability requires an attacker to influence the input prompt and can enable Python code execution on the ser...
drama-agent (>=0.1.1, <=0.1.4), kube-copilot (>=0.1.21, <=0.1.22) +2 more potentially affected by CVE-2024-21513 via langchain-experimental (>=0.0.8, <=0.0.14)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.21, =0.0.13, =0.0.18 - myevery 0.0.11 Source cves: CVE-2024-21513 Source advisory: MEND:CVE-2024-21513...
LangChain Security Breach
LangChain is an application built using LLM through composability by LangChain, Inc. in the United States. A security vulnerability exists in LangChain versions 0.0.15 through 0.0.21 and earlier, which stems from vulnerability to an arbitrary code execution attack that can be exploited by an...
CVE-2024-21513: Improper Control of Generation of Code
Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if the...
PT-2024-18926 · Unknown · Langchain Experimental +1
Name of the Vulnerable Software and Affected Versions: langchain-experimental versions 0.0.15 through 0.0.21 Description: The issue allows for Arbitrary Code Execution when retrieving values from the database. An attacker can exploit this by controlling the input prompt and executing arbitrary...
Arbitrary Code Execution
Overview langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses. Affected versions of this package are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all...
langchain_experimental Code Execution via Python REPL access
langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...
GHSA-WMVM-9VQV-5QPP langchain_experimental Code Execution via Python REPL access
langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...
