5411 matches found
GHSA-7GFQ-F96F-G85J langchain vulnerable to arbitrary code execution
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter. This is related to subclasses or a template...
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to loadprompt. This is related to subclasses or a template...
PYSEC-2023-151
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the loadprompt parameter...
Arbitrary Code Execution
pandasai is vulnerable to Arbitrary Code Execution. The vulnerability exists in cleancode function at init.py due to lack of security checks which allows an attacker to inject and execute malicious code, resulting in prompt injection...
LangChain 代码注入漏洞
LangChain builds applications using LLM through composability. A code injection vulnerability exists in LangChain version v.0.0.171 that could allow a remote attacker to execute arbitrary code via a json file and the loadprompt parameter...
PT-2023-25510 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: langchain version 0.0.171 Description: An issue in langchain allows a remote attacker to execute arbitrary code via a JSON file to the load prompt parameter. This is related to subclasses or a template. Recommendations: For langchain version...
pandasai vulnerable to prompt injection
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
GHSA-W832-V3C6-M6RG pandasai vulnerable to prompt injection
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
CVE-2023-39660
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
CVE-2023-39660: Improper Control of Generation of Code
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
PandasAI 安全漏洞
PandasAI is a Python library that integrates generative AI functionality into pandas to make dataframes conversational. Gaberiele Venturi A security vulnerability exists in PandasAI v.0.8.0 and earlier versions, which stems from an arbitrary code execution vulnerability in the prompt function...
CVE-2023-39660
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...
Arbitrary Code Execution
langchain is vulnerable to Arbitrary Code Execution. The vulnerability is due to the usage of the exec python function in PythonAstREPLTool.run which can be exploited to execute arbitrary Python code through prompt injection...
GHSA-FJ32-Q626-PJJC LangChain vulnerable to arbitrary code execution
An issue in LangChain prior to v.0.0.247 allows a remote attacker to execute arbitrary code via the prompt parameter...
CVE-2023-38860
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...
CVE-2023-38860
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...
PYSEC-2023-146
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the frommathprompt and fromcoloredobjectprompt functions...
PYSEC-2023-145
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter...
