Description
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langchain | < 0.0.325 | 0.0.325 | GHSA-prgp-w7vf-ch62 |
| PyPI | langchain | < 0.0.233 | 0.0.233 | PYSEC-2023-147 |