Description
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM application leveraging `XMLToolMessage` class may be exposed to untrusted XML input that could result in DoS and/or exposing local files with sensitive information. Version 0.53.4 fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| langroid | langroid | < 0.53.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langroid | < 0.53.4 | 0.53.4 | GHSA-pw95-88fg-3j6f |