PYSEC-2023-147

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

PYSEC-2023-145

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

Code injection

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

PYSEC-2023-145

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

PYSEC-2023-146

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +115 more potentially affected by CVE-2023-38896 via langchain (>=0.0.27, <=0.0.194)

langchain PYPI version =0.0.27, =0.1.7, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.2.0, =0.15.5, =0.1.3, =0.1.1, =5.2.0, =0.1.1, =0.35.0, =0.0.0, =0.0.1 and more Source cves: CVE-2023-38896 Source advisory: OSV:PYSEC-2023-146...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-38860 via langchain (>=0.0.27, <=0.0.246)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38860 Source advisory: OSV:PYSEC-2023-145...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +163 more potentially affected by CVE-2023-39659 via langchain (>=0.0.27, <=0.0.232)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.2.0, =0.15.5, =0.18.3 and more Source cves: CVE-2023-39659 Source advisory: OSV:PYSEC-2023-147...

PYSEC-2023-146

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

PYSEC-2023-147

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

CVE-2023-38860

The CVE-2023-38860 issue affects LangChain v0.0.231, where an attacker can trigger remote code execution via the prompt parameter due to insecure handling. Reported details across sources confirm a critical severity (CVSS v3.1: 9.8, NETWORK vector, no user interaction, high impact on confidential...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +169 more potentially affected by CVE-2023-38896 via langchain (>=0.0.27, <=0.0.235)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-38896 Source advisory: MEND:CVE-2023-38896...

LangChain Code Injection Vulnerability

LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.231 that originates from allowing remote attackers to execute arbitrary code via a prompt parameter...

CVE-2023-38860

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

LangChain Injection Vulnerability

LangChain is an application built using LLM through composability. A security vulnerability exists in LangChain version v.0.0.232, which originates from arbitrary code execution via the PythonAstREPLTool.run component...

CVE-2023-39659

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

CVE-2023-38860

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-39659

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

CVE-2023-38860: Improper Control of Generation of Code

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-39659: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...