2869 matches found
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +152 more potentially affected by CVE-2023-34540 via langchain (>=0.0.27, <=0.0.224)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.2.0, =0.15.5, =0.18.3 and more Source cves: CVE-2023-34540 Source advisory: OSV:PYSEC-2023-91...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
Langchain 安全漏洞
LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...
CVE-2023-34540
Summary: Langchain before v0.0.225 contains a remote code execution vulnerability in the JiraAPIWrapper. The flaw allows an attacker to execute arbitrary code via crafted input in the wrapper component. A fix is available, referenced by the v0.0.225 release notes. Affected scope (from connected d...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +152 more potentially affected by CVE-2023-34540 via langchain (>=0.0.27, <=0.0.224)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.2.0, =0.15.5, =0.18.3 and more Source cves: CVE-2023-34540 Source advisory: MEND:CVE-2023-34540...
PT-2023-24913 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: Langchain versions prior to 0.0.225 Description: The issue allows attackers to execute arbitrary code via crafted input, specifically through the JiraAPIWrapper component. This enables the execution of arbitrary code, potentially leading to...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540: Undefined Security Weakness
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
PT-2023-4194 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.0.247 Description: The issue is related to a SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component. This vulnerability is due to the lack of...
GHSA-FPRP-P869-W6Q2 LangChain vulnerable to code injection
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
agent-lab-sdk (>=0.1.7, <=0.1.16), arxiv-bot (>=0.0.1, <=0.0.4) +36 more potentially affected by CVE-2023-29374 via langchain (>=0.0.27, <=0.0.131)
langchain PYPI version =0.0.27, =0.1.7, =0.0.1, =0.2.0, =0.15.5, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =1.0.1, =0.0.4, =0.1.0, =0.0.1, =10.8.3, =0.1.3, =0.1.5 and more Source cves: CVE-2023-29374 Source advisory: GHSA-FPRP-P869-W6Q2...
agent-lab-sdk (>=0.1.7, <=0.1.16), arxiv-bot (>=0.0.1, <=0.0.4) +36 more potentially affected by CVE-2023-29374 via langchain (>=0.0.27, <=0.0.131)
langchain PYPI version =0.0.27, =0.1.7, =0.0.1, =0.2.0, =0.15.5, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =1.0.1, =0.0.4, =0.1.0, =0.0.1, =10.8.3, =0.1.3, =0.1.5 and more Source cves: CVE-2023-29374 Source advisory: OSV:GHSA-FPRP-P869-W6Q2...
LangChain vulnerable to code injection
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
Design/Logic Flaw
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
PYSEC-2023-18
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
agent-lab-sdk (>=0.1.7, <=0.1.16), arxiv-bot (>=0.0.1, <=0.0.4) +36 more potentially affected by CVE-2023-29374 via langchain (>=0.0.27, <=0.0.131)
langchain PYPI version =0.0.27, =0.1.7, =0.0.1, =0.2.0, =0.15.5, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =1.0.1, =0.0.4, =0.1.0, =0.0.1, =10.8.3, =0.1.3, =0.1.5 and more Source cves: CVE-2023-29374 Source advisory: OSV:PYSEC-2023-18...