Skip to content
OpenAdvisories

Package · PyPI

langchain-experimental

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-46946

    LangChain Experimental Eval Injection vulnerability

    langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcb…

    langchain-experimental PyPI
  • Critical 9.8
    CVE-2024-27444

    LangChain Experimental vulnerable to arbitrary code execution

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, o…

    langchain-experimental PyPI
  • Critical 9.8
    CVE-2023-44467

    langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.

    langchain-experimental PyPI