PT-2023-27040

Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.245 through 0.0.307 Description The issue is related to incorrect code generation control in the numexpr library of the LangChain framework, allowing a remote attacker to execute arbitrary code via the evaluate function...

Command Execution Vulnerability in numexpr

numexpr is a toolkit for Python. A command execution vulnerability exists in numexpr. An attacker can exploit this vulnerability to execute system commands...