PT-2024-32293 · Sympy +1 · Sympy +1

Name of the Vulnerable Software and Affected Versions: langchain experimental versions 0.1.17 through 0.3.0 Description: The issue allows attackers to execute arbitrary code through sympy.sympify which uses eval in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in a specific commit on...