10 matches found
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36188 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36188 Source advisory: GHSA-57FC-8Q82-GFP3...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36188 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36188 Source advisory: OSV:GHSA-57FC-8Q82-GFP3...
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36188 via langchain (>=0.0.27, <=0.0.246)
langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36188 Source advisory: OSV:PYSEC-2023-109...
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36188: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...
CVE-2023-36188
CVE-2023-36188 affects LangChain v0.0.64, enabling remote code execution via the PALChain parameter in Python exec. The issue stems from deserialization/execution pathways that process untrusted data and can lead to arbitrary code execution. Affected product: LangChain core library (v0.0.64); imp...
