1907 matches found
CVE-2023-36188: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36189
CVE-2023-36189 describes an SQL injection vulnerability in the langchain project, specifically through the SQLDatabaseChain component. The issue is triggered by unvalidated input reaching the SQLDatabaseChain, allowing a remote attacker to obtain sensitive information. Public sources consistently...
LangChain SQL注入漏洞
LangChain is an application built using LLM through composability. LangChain version v.0.0.64 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
langchain arbitrary code execution vulnerability
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...
GHSA-2QMJ-7962-CJQ8 langchain arbitrary code execution vulnerability
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
PYSEC-2023-98
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method...
Code injection
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
PYSEC-2023-98
An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
CVE-2023-36258
LangChain prior to 0.0.236 is affected by CVE-2023-36258, enabling an attacker to execute arbitrary Python code via os.system, eval, or exec. The issue affects LangChain’s Python usage and the root cause relates to unsafe code execution functions; updating to 0.0.236 or later is recommended to re...
LangChain 安全漏洞
LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.199, which stems from a vulnerability that allows an attacker to execute arbitrary code via PALChain in the python exec method...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
CVE-2023-36258: Improper Control of Generation of Code
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability exists because it does not properly validate the loadprompt method, which allows an attacker to execute malicious code on the system...