CVE-2023-39659

9.8

CRITICALCVSS v3

Published

August 15, 2023

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.

langchain-ai/langchain

GitHubThe agent engineering platform.

<= 0.0.232, < 0.0.325, < 0.0.233NVD

langchain

Python Package IndexBuilding applications with LLMs through composability

<= 0.0.232, < 0.0.325, < 0.0.233NVD

langchain

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

Rust port of the ideas produced in langchain-py and langchain-js

<= 0.0.232, < 0.0.325, < 0.0.233NVD

LangChain

NuGet GalleryLangChain meta-package with the most used things.

<= 0.0.232, < 0.0.325, < 0.0.233NVD

langchain

RubyGemsWrite a longer description or delete this line.

<= 0.0.232, < 0.0.325, < 0.0.233NVD

langchain

NPMTypescript bindings for langchain

<= 0.0.232, < 0.0.325, < 0.0.233NVD

Security Advisories

CVE-2023-39659

Description

More on this CVE