CVE-2023-39631

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library...

CVE-2023-39631

LangChain (Langchain) v0.0.245 contains a remote code execution vulnerability in the evaluate function via the numexpr library. Root cause: improper neutralization/input handling in the evaluate path, enabling arbitrary code execution. Affected component/function: Langchain’s evaluate using numex...

numexpr:fuzz_numexpr: Index-out-of-bounds in interpreter.cpython-38-x86_64-linux-gnu.so

Detailed Report: https://oss-fuzz.com/testcase?key=5490219729420288 Project: numexpr Fuzzing Engine: libFuzzer Fuzz Target: fuzznumexpr Job Type: libfuzzerubsannumexpr Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: interpreter.cpython-38-x8664-linux-gnu.so...

PT-2023-27040

Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.245 through 0.0.307 Description The issue is related to incorrect code generation control in the numexpr library of the LangChain framework, allowing a remote attacker to execute arbitrary code via the evaluate function...

Command Execution Vulnerability in numexpr

numexpr is a toolkit for Python. A command execution vulnerability exists in numexpr. An attacker can exploit this vulnerability to execute system commands...