Server-side request forgery (SSRF) In langchain
Description
Langchain Server-Side Request Forgery vulnerability In Langchain before 0.0.329, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 pypi | 0.0.329 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.