Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-29374

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fprp-p869-w6q2

LangChain vulnerable to code injection In LangChain through 0.0.131, the `LLMMathChain` chain allows prompt injection attacks that can execute arbitrary code via the Python `exec()` method.

gitlab/pypi/langchain/CVE-2023-29374

LangChain vulnerable to code injection In LangChain through 0.0.131, the `LLMMathChain` chain allows prompt injection attacks that can execute arbitrary code via the Python `exec()` method.

pypa/langchain/PYSEC-2023-18

In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.

pysec/PYSEC-2023-18

In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.