Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-7gfq-f96f-g85j: langchain vulnerable to arbitrary code execution

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.

ghsa
#js#git

langchain vulnerable to arbitrary code execution

Critical severity GitHub Reviewed Published Aug 22, 2023 to the GitHub Advisory Database • Updated Aug 23, 2023

Related news

CVE-2023-36281: Template injection to arbitrary code execution · Issue #4394 · langchain-ai/langchain

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.