logo

Database

Lack of data validation In langchain

Description

Langchain vulnerable to arbitrary code execution Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-345412. NVD-2023-345413. OSV-2023-345414. GCVE-2023-34541

References

1. https://github.com/langchain-ai/langchain/issues/48492. https://github.com/langchain-ai/langchain/issues/4849#issuecomment-16978965693. https://github.com/langchain-ai/langchain/pull/84254. https://github.com/langchain-ai/langchain/commit/fab24457bcf8ede882abd11419769c92bc4e77515. https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2023-92.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.