CVE-2023-36281

9.8

CRITICALCVSS v3

Published

August 22, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.

langchain-ai/langchain

GitHubThe agent engineering platform.

= 0.0.171, < 0.0.312, < 0.0.171NVD

langchain

Python Package IndexBuilding applications with LLMs through composability

= 0.0.171, < 0.0.312, < 0.0.171NVD

langchain

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Rust port of the ideas produced in langchain-py and langchain-js

= 0.0.171, < 0.0.312, < 0.0.171NVD

LangChain

NuGet GalleryLangChain meta-package with the most used things.

= 0.0.171, < 0.0.312, < 0.0.171NVD

langchain

RubyGemsWrite a longer description or delete this line.

= 0.0.171, < 0.0.312, < 0.0.171NVD

langchain

NPMTypescript bindings for langchain

= 0.0.171, < 0.0.312, < 0.0.171NVD

Security Advisories

CVE-2023-36281

Description

More on this CVE