PYSEC-2023-147

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

PYSEC-2023-146

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

Code injection

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

PYSEC-2023-147

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

PYSEC-2023-145

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

PYSEC-2023-145

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

LangChain Injection Vulnerability

LangChain is used to build applications using LLM through composability. A security vulnerability exists in langchain version 0.0.194 and earlier versions, which results from arbitrary code execution via the frommathprompt and fromcoloredobjectprompt functions...

CVE-2023-38896

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

PT-2023-27058

Name of the Vulnerable Software and Affected Versions langchain langchain-ai versions 0.0.232 and earlier langchain langchain-ai versions prior to 0.0.325 Description An issue in langchain langchain-ai allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLToo...

CVE-2023-39659

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

CVE-2023-39659: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

CVE-2023-38860

The CVE-2023-38860 issue affects LangChain v0.0.231, where an attacker can trigger remote code execution via the prompt parameter due to insecure handling. Reported details across sources confirm a critical severity (CVSS v3.1: 9.8, NETWORK vector, no user interaction, high impact on confidential...

CVE-2023-38896

An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...

CVE-2023-38860

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-39659

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

LangChain Code Injection Vulnerability

LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.231 that originates from allowing remote attackers to execute arbitrary code via a prompt parameter...

CVE-2023-38860

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-38860: Improper Control of Generation of Code

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-38860

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...

CVE-2023-39659

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...