Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-fj32-q626-pjjc: LangChain vulnerable to arbitrary code execution

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

ghsa
#git

LangChain vulnerable to arbitrary code execution

Moderate severity GitHub Reviewed Published Aug 15, 2023 to the GitHub Advisory Database • Updated Aug 15, 2023

Related news

CVE-2023-38860: RCE vulnerability in CPAL (causal program-aided language) chain · Issue #7641 · langchain-ai/langchain

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.