CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

CVE-2024-27444: Exposed Dangerous Method or Function

langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...