852 matches found
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
PT-2023-24914 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: Langchain version 0.0.171 Description: The issue concerns arbitrary code execution in the load prompt function. This allows for potentially malicious code to be executed, posing a significant risk. Recommendations: For Langchain version...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to arbitrary code execution via load_prompt. The CVE-2023-34541 entry shows a CRITICAL CVSS v3.1 score (9.8) with NETWORK attack vector, no authentication, and high impact on confidentiality, integrity, and availability. A Proof-of-Concept exploit is indicated in t...
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in loadprompt...
LangChain 安全漏洞
LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability is due to insufficient input sanitization in the run function of jira.py when using the other jira mode, which allows an attacker to execute malicious code on the system...
GHSA-X32C-59V5-H7FG Langchain OS Command Injection vulnerability
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
Langchain OS Command Injection vulnerability
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
Remote code execution
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
PT-2023-24913 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: Langchain versions prior to 0.0.225 Description: The issue allows attackers to execute arbitrary code via crafted input, specifically through the JiraAPIWrapper component. This enables the execution of arbitrary code, potentially leading to...
CVE-2023-34540
Summary: Langchain before v0.0.225 contains a remote code execution vulnerability in the JiraAPIWrapper. The flaw allows an attacker to execute arbitrary code via crafted input in the wrapper component. A fix is available, referenced by the v0.0.225 release notes. Affected scope (from connected d...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
Langchain 安全漏洞
LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...
PT-2023-4194 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.0.247 Description: The issue is related to a SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component. This vulnerability is due to the lack of...