Skip to content
OpenAdvisories

Package · PyPI

langchain

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-39631

    Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

    An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

    langchain numexpr PyPI
  • Critical 9.8
    CVE-2023-36281 Public exploit

    langchain vulnerable to arbitrary code execution

    An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.

    langchain PyPI
  • Critical 9.8
    CVE-2023-39659

    LangChain vulnerable to arbitrary code execution

    An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.

    langchain PyPI
  • Critical 9.8
    CVE-2023-38896

    LangChain vulnerable to arbitrary code execution

    An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.

    langchain PyPI
  • Critical 9.8
    CVE-2023-38860

    LangChain vulnerable to arbitrary code execution

    An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

    langchain PyPI
  • Critical 9.8
    CVE-2023-36095

    langchain Code Injection vulnerability

    An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.

    langchain PyPI
  • Critical 9.8
    CVE-2023-36188

    langchain vulnerable to arbitrary code execution

    An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.

    langchain PyPI
  • Critical 9.8
    CVE-2023-36258

    langchain arbitrary code execution vulnerability

    An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.

    langchain PyPI
  • Critical 9.8
    CVE-2023-34541

    Langchain vulnerable to arbitrary code execution

    Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

    langchain PyPI
  • Critical 9.8
    CVE-2023-34540

    Langchain OS Command Injection vulnerability

    Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "relea…

    langchain PyPI
  • Critical 9.8
    CVE-2023-29374 EPSS 40%

    LangChain vulnerable to code injection

    In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.

    langchain PyPI