CVE-2023-36095

9.8

CRITICALCVSS v3

Published

August 5, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.

langchain-ai/langchain

GitHubThe agent engineering platform.

= 0.0.194, < 0.0.236NVD

langchain

Python Package IndexBuilding applications with LLMs through composability

= 0.0.194, < 0.0.236NVD

langchain

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Rust port of the ideas produced in langchain-py and langchain-js

= 0.0.194, < 0.0.236NVD

LangChain

NuGet GalleryLangChain meta-package with the most used things.

= 0.0.194, < 0.0.236NVD

langchain

RubyGemsWrite a longer description or delete this line.

= 0.0.194, < 0.0.236NVD

langchain

NPMTypescript bindings for langchain

= 0.0.194, < 0.0.236NVD

Security Advisories

CVE-2023-36095

Description

More on this CVE