Skip to content
OpenAdvisories

Package · PyPI

langchain-experimental

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2024-21513 Public exploit

    langchain-experimental vulnerable to Arbitrary Code Execution

    Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability an…

    langchain-experimental PyPI
  • High 7.8
    CVE-2024-38459

    langchain_experimental Code Execution via Python REPL access

    langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.

    langchain-experimental PyPI