806 matches found
GHSA-X32C-59V5-H7FG Langchain OS Command Injection vulnerability
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
Langchain OS Command Injection vulnerability
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
Remote code execution
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
PYSEC-2023-91
Langchain 0.0.171 is vulnerable to Arbitrary Code Execution...
PT-2023-24913 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: Langchain versions prior to 0.0.225 Description: The issue allows attackers to execute arbitrary code via crafted input, specifically through the JiraAPIWrapper component. This enables the execution of arbitrary code, potentially leading to...
CVE-2023-34540
Summary: Langchain before v0.0.225 contains a remote code execution vulnerability in the JiraAPIWrapper. The flaw allows an attacker to execute arbitrary code via crafted input in the wrapper component. A fix is available, referenced by the v0.0.225 release notes. Affected scope (from connected d...
Langchain 安全漏洞
LangChain is used to build applications using LLM through composability. A security vulnerability exists in Langchain version 0.0.171, which stems from an arbitrary code execution vulnerability...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
CVE-2023-34540
Langchain before v0.0.225 was discovered to contain a remote code execution RCE vulnerability in the component JiraAPIWrapper aka the JIRA API wrapper. This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available...
PT-2023-4194 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.0.247 Description: The issue is related to a SQL injection vulnerability that allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component. This vulnerability is due to the lack of...
GHSA-FPRP-P869-W6Q2 LangChain vulnerable to code injection
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
LangChain vulnerable to code injection
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
PYSEC-2023-18
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
PYSEC-2023-18
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
