917 matches found
PYSEC-2023-151
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...
PT-2023-25510 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...
CVE-2023-36281
Summary: CVE-2023-36281 affects LangChain v0.0.171, enabling remote code execution via a JSON file passed to the load_prompt pathway. The issue is described as related to subclasses or a template, with a high-severity CVSS 3.1 score (9.8) across sources (NVD/Red Hat/OSV/GHSA). What’s affected: La...
LangChain 代码注入漏洞
LangChain builds applications using LLM through composability. A code injection vulnerability exists in LangChain version v.0.0.171 that could allow a remote attacker to execute arbitrary code via a json file and the loadprompt parameter...
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. This vulnerability is caused by a flaw in the frommathprompt and fromcoloredobjectprompt functions, which could allow an attacker to execute arbitrary code on the victim's system by sending a specially crafted prompt...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability is due to the usage of the exec python function in PythonAstREPLTool.run which can be exploited to execute arbitrary Python code through prompt injection...
LangChain vulnerable to arbitrary code execution
An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...
LangChain vulnerable to arbitrary code execution
An issue in Harrison Chase langchain before version 0.0.236 allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
LangChain vulnerable to arbitrary code execution
An issue in langchain langchain-ai before version 0.0.325 allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
agent-actors (=0.1.0), agent-reader (>=0.2.1 <=0.2.2) +176 more potentially affected by CVE-2023-38860 via langchain (>=0.0.100 <=0.0.246)
langchain PYPI version =0.0.100, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.1.3, =0.1.5 and more Source cves: CVE-2023-38860 Source advisory: OSV:GHSA-FJ32-Q626-PJJC...
agent-actors (=0.1.0), agent-reader (>=0.2.1 <=0.2.2) +162 more potentially affected by CVE-2023-38896 via langchain (>=0.0.100 <=0.0.235)
langchain PYPI version =0.0.100, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.1.3, =0.1.5 and more Source cves: CVE-2023-38896 Source advisory: OSV:GHSA-92J5-3459-QGP4...
agent-actors (=0.1.0), agent-lab-sdk (>=0.1.7 <=0.1.16) +279 more potentially affected by CVE-2023-39659 via langchain (>=0.0.100 <=0.0.323)
langchain PYPI version =0.0.100, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.2, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.8, =0.0.5, =0.0.14, =0.0.18 - athina =0.1.0 and more Source cves: CVE-2023-39659 Source advisory: OSV:GHSA-PRGP-W7VF-CH62...
GHSA-FJ32-Q626-PJJC LangChain vulnerable to arbitrary code execution
An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...
GHSA-PRGP-W7VF-CH62 LangChain vulnerable to arbitrary code execution
An issue in langchain langchain-ai before version 0.0.325 allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
GHSA-92J5-3459-QGP4 LangChain vulnerable to arbitrary code execution
An issue in Harrison Chase langchain before version 0.0.236 allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
