Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-36281

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7gfq-f96f-g85j

langchain vulnerable to arbitrary code execution An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the `load_prompt` parameter. This is related to `__subclasses__` or a template.

gitlab/pypi/langchain/CVE-2023-36281

langchain vulnerable to arbitrary code execution An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the `load_prompt` parameter. This is related to `__subclasses__` or a template.

pypa/langchain/PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.

pysec/PYSEC-2023-151

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.