CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

langchain_experimental Code Execution via Python REPL access

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

GHSA-WMVM-9VQV-5QPP langchain_experimental Code Execution via Python REPL access

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

PYSEC-2024-53

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

PYSEC-2024-53

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

CVE-2024-38459 affects langchain_experimental before 0.0.61. The issue allows Python REPL access without an opt-in step, a residual from an incomplete fix for CVE-2024-27444. Impact is described as high with local attack vector, requiring user interaction, and involving potential total impact to ...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

dodfminer (>=1.1.0 <=1.3.12rc6), nafigator (>=0.1.54 <=0.1.55) +3 more potentially affected by CVE-2020-26683 via pymupdf (>=1.16.14 <=1.17.0)

pymupdf PYPI version =1.16.14, =1.1.0, =0.1.54, =0.1.0, =2.0.9, =0.1.20, =0.1.29 Source cves: CVE-2020-26683 Source advisory: SNYK:PYTHON-PYMUPDF-12704824...

PYSEC-2023-147

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...

K31130692: GNU Guile vulnerabilities CVE-2016-8605 and CVE-2016-8606

Security Advisory Description CVE-2016-8605 The mkdir procedure of GNU Guile temporarily changed the process umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode...

SUSE CVE-2016-8606

The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...

SUSE CVE-2021-3514

When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

at.molindo:esi4j (>=0.3.0 <=3.0.2), at.molindo:scrutineer (>=2.0.0 <=3.0.0) +9 more potentially affected by CVE-2022-24913 via com.fasterxml.util:java-merge-sort (>=0.7.1 <=1.0.2)

com.fasterxml.util:java-merge-sort MAVEN version =0.7.1, =0.3.0, =2.0.0, =1.0.3, =2.3.0, =0.5.3, =0.5.3, =0.9.0, =0.5.3, =0.5.3, =0.9.0, =1.0.2, =1.0.4 Source cves: CVE-2022-24913 Source advisory: OSV:GHSA-QXXC-7MQ4-MF79...

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

Malicious code in sdk_repl_app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae02b51801addee1d7d9465bfadddd598ae7933bb807a06a29da4093ef17a072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

clarity-repl (>=0.12.3 <=0.13.3) potentially affected by CVE-2021-38191 via tokio (=1.6.1)

tokio CARGO version =1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - clarity-repl =0.12.3, =0.13.3 Source cves: CVE-2021-38191 Source advisory: OSV:GHSA-2GRH-HM3W-W7HV...

clarity-repl (>=0.12.3 <=0.13.3) potentially affected by CVE-2021-38191 via tokio (=1.6.1)

tokio CARGO version =1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - clarity-repl =0.12.3, =0.13.3 Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...

CVE-2021-30502

The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...