CVE-2023-44467

langchainexperimental aka LangChain Experimental in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by palchain/base.py...

LangChain Experimental Python Library <= 0.0.14 (CVE-2023-44467)

LangChain is a framework for developing applications powered by large language models. langchainexperimental aka LangChain Experimental in LangChain = 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by...

LangChain Experimental vulnerable to arbitrary code execution

langchainexperimental aka LangChain Experimental before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not...

GHSA-V8VJ-CV27-HJV8 LangChain Experimental vulnerable to arbitrary code execution

langchainexperimental aka LangChain Experimental before 0.0.52, part of LangChain before 0.1.8, allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not...

Authentication flaw

langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...

CVE-2023-44467

creationtimestamp| type| source ---|---|--- 2023-10-10 00:16:12+00:00| seen| https://t.me/cibsecurity/71868 2025-04-03 13:52:48+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/12001 2025-04-04 13:42:39+00:00| seen|...

kube-copilot (>=0.1.21 <=0.1.22), langcorn (>=0.0.14 <=0.0.18) +1 more potentially affected by CVE-2023-44467 via langchain-experimental (>=0.0.10 <=0.0.14)

langchain-experimental PYPI version =0.0.10, =0.1.21, =0.0.14, =2.3.0, =4.3.3 Source cves: CVE-2023-44467 Source advisory: OSV:GHSA-GJJR-63X4-V8CQ...

CVE-2023-44467

langchainexperimental aka LangChain Experimental in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by palchain/base.py...

kube-copilot (>=0.1.21 <=0.1.22), langcorn (>=0.0.14 <=0.0.18) +1 more potentially affected by CVE-2023-44467 via langchain-experimental (>=0.0.10 <=0.0.14)

langchain-experimental PYPI version =0.0.10, =0.1.21, =0.0.14, =2.3.0, =4.3.3 Source cves: CVE-2023-44467 Source advisory: OSV:PYSEC-2023-194...

CVE-2023-44467

LangChain Experimental (langchain_experimental) in LangChain versions before 0.0.306 is documented to bypass the prior CVE-2023-36258 fix and enable arbitrary code execution via import in Python code, not prohibited by pal_chain/base.py. Nessus notes even older builds (