2870 matches found
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. This vulnerability is caused by a flaw in the frommathprompt and fromcoloredobjectprompt functions, which could allow an attacker to execute arbitrary code on the victim's system by sending a specially crafted prompt...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability is due to the usage of the exec python function in PythonAstREPLTool.run which can be exploited to execute arbitrary Python code through prompt injection...
LangChain vulnerable to arbitrary code execution
An issue in langchain langchain-ai before version 0.0.325 allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
GHSA-92J5-3459-QGP4 LangChain vulnerable to arbitrary code execution
An issue in Harrison Chase langchain before version 0.0.236 allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
LangChain vulnerable to arbitrary code execution
An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +169 more potentially affected by CVE-2023-38896 via langchain (>=0.0.27, <=0.0.235)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38896 Source advisory: OSV:GHSA-92J5-3459-QGP4...
LangChain vulnerable to arbitrary code execution
An issue in Harrison Chase langchain before version 0.0.236 allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +285 more potentially affected by CVE-2023-39659 via langchain (>=0.0.27, <=0.0.323)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 - athina 0.1.0 and more Source cves: CVE-2023-39659 Source advisory: GHSA-PRGP-W7VF-CH62...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-38860 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38860 Source advisory: OSV:GHSA-FJ32-Q626-PJJC...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-38860 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38860 Source advisory: GHSA-FJ32-Q626-PJJC...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +285 more potentially affected by CVE-2023-39659 via langchain (>=0.0.27, <=0.0.323)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.1, =0.0.14, =0.0.18 - athina 0.1.0 and more Source cves: CVE-2023-39659 Source advisory: OSV:GHSA-PRGP-W7VF-CH62...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +169 more potentially affected by CVE-2023-38896 via langchain (>=0.0.27, <=0.0.235)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38896 Source advisory: GHSA-92J5-3459-QGP4...
GHSA-FJ32-Q626-PJJC LangChain vulnerable to arbitrary code execution
An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...
GHSA-PRGP-W7VF-CH62 LangChain vulnerable to arbitrary code execution
An issue in langchain langchain-ai before version 0.0.325 allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...