29 matches found
ROOT-APP-PYPI-CVE-2023-39631 CVE-2023-39631 in numexpr - Patched by Root
Root has patched CVE-2023-39631 in the numexpr package for Root:PyPI. Multiple fixed versions available...
EUVD-2023-0117
Malicious code in bioql PyPI...
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
numexpr library in the Code Execution
The vulnerability of the numexpr library used by the LangChain model-based application framework is related to improper code generation control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20250203-08
Vulnerability in numexpr library of framework for creating applications based on combining languages and models LangChain is related to incorrect code generation control. LangChain models is related to improper code generation control. Exploitation of the vulnerability could allow an attacker...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability exists in evaluate function of numexpr library which allows an attacker to inject and execute arbitrary commands...
GHSA-F73W-4M7G-CH9X Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library. Patches: Released in v.0.0.308. numexpr dependency is optional for langchain...
aicodebot (0.2.6), ax-env (>=0.2.2, <=0.3.3) +53 more potentially affected by CVE-2023-39631 via numexpr (>=2.6.8, <=2.8.4)
numexpr PYPI version =2.6.8, =0.2.2, =0.1.11, =2.2.11, =0.1.0rc1, =1.2.0, =0.1.36, =0.5.9, =0.0.0, =1.0.0.dev1, =2.4.0, =0.3.1, =0.9.0.dev23 and more Source cves: CVE-2023-39631 Source advisory: OSV:GHSA-F73W-4M7G-CH9X...
aicodebot (0.2.6), ax-env (>=0.2.2, <=0.3.3) +53 more potentially affected by CVE-2023-39631 via numexpr (>=2.6.8, <=2.8.4)
numexpr PYPI version =2.6.8, =0.2.2, =0.1.11, =2.2.11, =0.1.0rc1, =1.2.0, =0.1.36, =0.5.9, =0.0.0, =1.0.0.dev1, =2.4.0, =0.3.1, =0.9.0.dev23 and more Source cves: CVE-2023-39631 Source advisory: GHSA-F73W-4M7G-CH9X...
Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library. Patches: Released in v.0.0.308. numexpr dependency is optional for langchain...
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
aicodebot (0.2.6), ax-env (>=0.2.2, <=0.3.3) +53 more potentially affected by CVE-2023-39631 via numexpr (>=2.6.8, <=2.8.4)
numexpr PYPI version =2.6.8, =0.2.2, =0.1.11, =2.2.11, =0.1.0rc1, =1.2.0, =0.1.36, =0.5.9, =0.0.0, =1.0.0.dev1, =2.4.0, =0.3.1, =0.9.0.dev23 and more Source cves: CVE-2023-39631 Source advisory: OSV:PYSEC-2023-163...
Code injection
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
PYSEC-2023-162
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
PYSEC-2023-163
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
PYSEC-2023-162
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
PYSEC-2023-163
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...
CVE-2023-39631
LangChain (Langchain) v0.0.245 contains a remote code execution vulnerability in the evaluate function via the numexpr library. Root cause: improper neutralization/input handling in the evaluate path, enabling arbitrary code execution. Affected component/function: Langchain’s evaluate using numex...
