2869 matches found
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36188 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36188 Source advisory: MEND:CVE-2023-36188...
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36188
CVE-2023-36188 affects LangChain v0.0.64, enabling remote code execution via the PALChain parameter in Python exec. The issue stems from deserialization/execution pathways that process untrusted data and can lead to arbitrary code execution. Affected product: LangChain core library (v0.0.64); imp...
CVE-2023-36189
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
LangChain SQL注入漏洞
LangChain is an application built using LLM through composability. LangChain version v.0.0.64 suffers from a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...
CVE-2023-36189
CVE-2023-36189 describes an SQL injection vulnerability in the langchain project, specifically through the SQLDatabaseChain component. The issue is triggered by unvalidated input reaching the SQLDatabaseChain, allowing a remote attacker to obtain sensitive information. Public sources consistently...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36189 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36189 Source advisory: MEND:CVE-2023-36189...
langchain arbitrary code execution vulnerability
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...
GHSA-2QMJ-7962-CJQ8 langchain arbitrary code execution vulnerability
An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36258 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36258 Source advisory: GHSA-2QMJ-7962-CJQ8...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36258 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36258 Source advisory: OSV:GHSA-2QMJ-7962-CJQ8...
CVE-2023-36258
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...
