Lucene search
+L

39 matches found

OSV
OSV
•added 2023/07/06 3:30 p.m.•69 views

GHSA-57FC-8Q82-GFP3 langchain vulnerable to arbitrary code execution

An issue in langchain allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS7.6AI score0.01895EPSS
SaveExploits2References8
attackerkb
attackerkb
•added 2023/07/06 2:15 p.m.•11 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS7.8AI score0.01895EPSS
SaveExploits2References3
NVD
NVD
•added 2023/07/06 2:15 p.m.•42 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS9.6AI score0.01895EPSS
SaveExploits2References2
PyPA
PyPA
•added 2023/07/06 2:15 p.m.•16 views

PYSEC-2023-109

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.1AI score0.01895EPSS
SaveExploits2References3Affected Software1
OSV
OSV
•added 2023/07/06 2:15 p.m.•32 views

PYSEC-2023-109

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS7.6AI score0.01895EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/07/06 12:00 a.m.•19 views

LangChain 注入漏洞

LangChain is an application built using LLM through composability. A security vulnerability exists in LangChain version v.0.0.64, which stems from a vulnerability that allows an attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.8AI score0.01895EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2023/07/06 12:00 a.m.•28 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

8.1AI score0.01895EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2023/07/06 12:00 a.m.•53 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.9AI score0.01895EPSS
SaveExploits2References2
CVE
CVE
•added 2023/07/06 12:00 a.m.•100 views

CVE-2023-36188

CVE-2023-36188 affects LangChain v0.0.64, enabling remote code execution via the PALChain parameter in Python exec. The issue stems from deserialization/execution pathways that process untrusted data and can lead to arbitrary code execution. Affected product: LangChain core library (v0.0.64); imp...

9.8CVSS9.6AI score0.01895EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/06 12:00 a.m.•10 views

PT-2023-25472 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.64 Description: The issue allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. This enables the attacker to run malicious code, potentially leading to system compromise...

9.8CVSS9.6AI score0.01895EPSS
SaveExploits2References13
OSV
OSV
•added 2023/07/06 12:00 a.m.•31 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

8.1AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/06 12:00 a.m.•3 views

CVE-2023-36188: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.7AI score0.01895EPSS
SaveExploits2References2
Mend
Mend
•added 2023/07/06 12:00 a.m.•2 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS0.01895EPSS
SaveExploits2References11
OSV
OSV
•added 2023/07/03 9:30 p.m.•51 views

GHSA-2QMJ-7962-CJQ8 langchain arbitrary code execution vulnerability

An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8.7AI score0.01074EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
•added 2023/07/03 9:30 p.m.•73 views

langchain arbitrary code execution vulnerability

An issue in langchain allows an attacker to execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8.7AI score0.01074EPSS
SaveExploits1References11Affected Software1
OSV
OSV
•added 2023/07/03 9:15 p.m.•9 views

PYSEC-2023-98

An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8.7AI score0.01074EPSS
SaveExploits1References3
PyPA
PyPA
•added 2023/07/03 9:15 p.m.•17 views

PYSEC-2023-98

An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8.7AI score0.01074EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/07/03 12:00 a.m.•20 views

LangChain 安全漏洞

LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.199, which stems from a vulnerability that allows an attacker to execute arbitrary code via PALChain in the python exec method...

9.8CVSS8.6AI score0.01074EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/03 12:00 a.m.•14 views

PT-2023-25499 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.0.236 Description: The issue allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used. This is possible via the PALChain in the python exec method. Recommendation...

9.8CVSS8.5AI score0.01074EPSS
SaveExploits1References21
Rows per page
Query Builder