langchain_experimental Code Execution via Python REPL access

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-38459 · ADVISORY
• langchain-ai/langchain#22860 · WEB
• langchain-ai/langchain commit ce0b0f2 · WEB
• langchain-ai/langchain · PACKAGE
• langchain-ai/langchain · WEB
• pypa/advisory-database · WEB
• GitHub Advisory GHSA-wmvm-9vqv-5qpp · ADVISORY

Weitere Schwachstellen in langchain-experimental

• CVE-2024-46946KRITISCH 9.8langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sy…
• CVE-2024-21513HOCH 8.5Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving valu…
• CVE-2024-27444KRITISCH 9.8langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execut…
• CVE-2023-44467KRITISCH 9.8langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and exec…