CVE-2023-39631

9.8

CRITICALCVSS v3

Published

September 1, 2023

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

GitHubThe agent engineering platform.

= 0.0.245, < 0.0.308NVD

GitHubFast numerical array expression evaluator for Python, NumPy, Pandas, PyTables and more

< 2.8.5NVD

Python Package Index

Building applications with LLMs through composability

= 0.0.245, < 0.0.308NVD

Crates.ioRust port of the ideas produced in langchain-py and langchain-js

= 0.0.245, < 0.0.308NVD

NuGet GalleryLangChain meta-package with the most used things.

= 0.0.245, < 0.0.308NVD

RubyGemsWrite a longer description or delete this line.

= 0.0.245, < 0.0.308NVD

NPMTypescript bindings for langchain

= 0.0.245, < 0.0.308NVD