Headline
GHSA-92j5-3459-qgp4: LangChain vulnerable to arbitrary code execution
An issue in Harrison Chase langchain before version 0.0.236 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
LangChain vulnerable to arbitrary code execution
Moderate severity GitHub Reviewed Published Aug 15, 2023 to the GitHub Advisory Database • Updated Aug 15, 2023