apsbot (>=0.2.0, <=0.3.1), askagent (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2024-38459 via langchain-experimental (>=0.0.8, <=0.0.60)

langchain-experimental PYPI version =0.0.8, =0.2.0, =0.1.0, =0.0.3, =0.1.1, =0.0.1a1, =0.1.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.21, =0.1.27 and more Source cves: CVE-2024-38459 Source advisory: OSV:GHSA-WMVM-9VQV-5QPP...

apsbot (>=0.2.0, <=0.3.1), askagent (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2024-38459 via langchain-experimental (>=0.0.8, <=0.0.60)

langchain-experimental PYPI version =0.0.8, =0.2.0, =0.1.0, =0.0.3, =0.1.1, =0.0.1a1, =0.1.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.21, =0.1.27 and more Source cves: CVE-2024-38459 Source advisory: GHSA-WMVM-9VQV-5QPP...

archive-retriever (0.1.0), crewai (>=0.61.0, <=0.70.1) +14 more potentially affected by CVE-2024-27444 +1 more via langchain-experimental (0.0.65)

langchain-experimental PYPI version 0.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-experimental and may be impacted: - archive-retriever 0.1.0 - crewai =0.61.0, =0.1.3, =0.1.114, =0.1.120a1, =0.1.120, =0.0.48, =0.0.96.dev6, =0.3.10a5,...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

The langchain_experimental (LangChain Experimental) package, prior to version 0.0.61 , is vulnerable to unauthorized code execution because it provides Python REPL access without requiring an opt-in step. This issue persists due to an incomplete fix for CVE-2024-27444 . Exploitation details and s...

CVE-2024-38459: Incorrect Default Permissions

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

apsbot (>=0.2.0, <=0.3.1), askagent (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2024-38459 via langchain-experimental (>=0.0.8, <=0.0.60)

langchain-experimental PYPI version =0.0.8, =0.2.0, =0.1.0, =0.0.3, =0.1.1, =0.0.1a1, =0.1.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.21, =0.1.27 and more Source cves: CVE-2024-38459 Source advisory: MEND:CVE-2024-38459...