Description
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langchain | < 0.0.247 | 0.0.247 | GHSA-fj32-q626-pjjc |
Critical · 9.8
CVE-2023-38860
EUVD-2023-0113GHSA-fj32-q626-pjjcPYSEC-2023-145
LangChain vulnerable to arbitrary code execution
Published Aug 15, 2023 · Updated Oct 9, 2024 · Assigned by mitre