CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
- Обновитесь до 0.0.247
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в langchain опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 23
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIRA API wrapper). This vulnerability allows attackers to execute arbitrary code via crafted input. As noted in the "releases/tag" reference, a fix is available.
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.