agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +314 more potentially affected by CVE-2024-28088 via langchain (>=0.0.27, <=0.0.338)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 and more Source cves: CVE-2024-28088 Source advisory: GHSA-H59X-P739-982C...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +146 more potentially affected by CVE-2024-28088 via langchain-core (>=0.0.1, <=0.1.28)

langchain-core PYPI version =0.0.1, =0.0.6.dev1, =0.0.1, =0.8.0, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.3.5, =0.4.12 - bisheng-langchain 0.2.3.1 and more Source cves: CVE-2024-28088 Source advisory: OSV:GHSA-H59X-P739-982C...

GHSA-H59X-P739-982C LangChain directory traversal vulnerability

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +314 more potentially affected by CVE-2024-28088 via langchain (>=0.0.27, <=0.0.338)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 and more Source cves: CVE-2024-28088 Source advisory: OSV:GHSA-H59X-P739-982C...

LangChain directory traversal vulnerability

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

PYSEC-2024-45

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

Directory traversal

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +430 more potentially affected by CVE-2024-28088 via langchain (>=0.0.27, <=0.1.10)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.1.0 and more Source cves: CVE-2024-28088 Source advisory: OSV:PYSEC-2024-43...

agentuniverse (>=0.0.6.dev1, <=0.0.7), akasha-terminal (>=0.8.0, <=0.8.5) +39 more potentially affected by CVE-2024-28088 via langchain-core (>=0.0.1, <=0.1.9)

langchain-core PYPI version =0.0.1, =0.0.6.dev1, =0.8.0, =0.3.5, =0.3.16, =0.1.0, =0.0.1, =0.0.1, =0.0.5, =0.4.8, =5.8.0 and more Source cves: CVE-2024-28088 Source advisory: OSV:PYSEC-2024-45...

PYSEC-2024-43

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

PYSEC-2024-45

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

PYSEC-2024-43

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

LangChain Security Breach

LangChain builds applications using LLM through composability. A security vulnerability exists in LangChain 0.1.10 and earlier versions that stems from a URI traversal vulnerability when loading configuration files...

CVE-2024-28088: Improper Limitation of a Pathname to a Restricted Directory

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

PT-2024-22256 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: LangChain versions 0.1.10 and earlier Description: The issue allows an actor who can control the final part of the path parameter in a load chain call to perform ../ directory traversal. This bypasses the intended behavior of loading...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +314 more potentially affected by CVE-2024-28088 via langchain (>=0.0.27, <=0.0.338)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 and more Source cves: CVE-2024-28088 Source advisory: MEND:CVE-2024-28088...

a-data-processing (0.0.1), ab-data-processing (0.0.1) +146 more potentially affected by CVE-2024-28088 via langchain-core (>=0.0.1, <=0.1.28)

langchain-core PYPI version =0.0.1, =0.0.6.dev1, =0.0.1, =0.8.0, =0.2.0, =0.1.0, =0.1.5, =0.0.13, =0.3.5, =0.4.12 - bisheng-langchain 0.2.3.1 and more Source cves: CVE-2024-28088 Source advisory: MEND:CVE-2024-28088...