Description
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langchain | < 0.0.308 | 0.0.308 | GHSA-f73w-4m7g-ch9x |
| PyPI | numexpr | < 2.8.5 | 2.8.5 | GHSA-f73w-4m7g-ch9x |