2870 matches found
bunkoer (0.0.3), chatmysql (0.1.14) +15 more potentially affected by CVE-2024-27444 via langchain-experimental (>=0.0.8, <=0.0.50)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.0, =0.1.4, =0.1.21, =0.3.0, =0.0.13, =0.0.1, =2.0.160, =2.0.171 and more Source cves: CVE-2024-27444 Source advisory: OSV:GHSA-V8VJ-CV27-HJV8...
LangChain Experimental vulnerable to arbitrary code execution
langchainexperimental aka LangChain Experimental before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not...
GHSA-V8VJ-CV27-HJV8 LangChain Experimental vulnerable to arbitrary code execution
langchainexperimental aka LangChain Experimental before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not...
bunkoer (0.0.3), chatmysql (0.1.14) +15 more potentially affected by CVE-2024-27444 via langchain-experimental (>=0.0.8, <=0.0.50)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.0, =0.1.4, =0.1.21, =0.3.0, =0.0.13, =0.0.1, =2.0.160, =2.0.171 and more Source cves: CVE-2024-27444 Source advisory: GHSA-V8VJ-CV27-HJV8...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +378 more potentially affected by CVE-2024-0243 via langchain (>=0.0.27, <=0.0.354)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2024-0243 Source advisory: OSV:GHSA-H9J7-5XVC-QHG5...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +378 more potentially affected by CVE-2024-0243 via langchain (>=0.0.27, <=0.0.354)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.0, =0.0.6.dev1, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2024-0243 Source advisory: GHSA-H9J7-5XVC-QHG5...
GHSA-H9J7-5XVC-QHG5 langchain Server-Side Request Forgery vulnerability
With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...
Authentication flaw
langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...
CVE-2024-27444
langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...
genai-agents (>=0.1.0, <=0.1.3), openagi (>=0.1.0b0, <=0.1.0b4) potentially affected by CVE-2024-0243 via langchain-exa (0.0.1)
langchain-exa PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-exa and may be impacted: - genai-agents =0.1.0, =0.1.0b0, =0.1.0b4 Source cves: CVE-2024-0243 Source advisory: OSV:PYSEC-2024-235...
CVE-2024-0243
With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...
LangChain Code Issues Vulnerabilities
LangChain is building applications using LLM through composability. LangChain is vulnerable to a code issue. An attacker could use this vulnerability to place a malicious HTML file with a link such as "https://example.completely.different/myfile.html" in it, allowing the crawler to continue...
CVE-2024-27444
langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...
CVE-2024-27444
langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...
bunkoer (0.0.3), chatmysql (0.1.14) +15 more potentially affected by CVE-2024-27444 via langchain-experimental (>=0.0.8, <=0.0.50)
langchain-experimental PYPI version =0.0.8, =0.1.1, =0.1.0, =0.1.4, =0.1.21, =0.3.0, =0.0.13, =0.0.1, =2.0.160, =2.0.171 and more Source cves: CVE-2024-27444 Source advisory: MEND:CVE-2024-27444...
CVE-2024-27444
The langchain_experimental (LangChain Experimental) component in LangChain before version 0.1.8 (specifically versions before 0.0.52) is vulnerable to arbitrary code execution. The root cause is that certain Python attributes—including ——import” , ——subclasses” , ——builtins” , ——globals” , ——geta...
CVE-2024-27444
langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...
LangChain Security Breach
LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain versions prior to 0.1.8 that stems from a vulnerability that allows an attacker to bypass and execute arbitrary code via properties in Python code...
PT-2024-21902
Name of the Vulnerable Software and Affected Versions LangChain versions prior to 0.1.8 langchain experimental versions prior to 0.0.52 Description The issue allows an attacker to bypass a previous fix and execute arbitrary code via certain attributes in Python code, including import , subclasses...
CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader
With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...