En resumen
- CVE-2023-44467 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a langchain-experimental, langchain experimental (langchain).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 64.0% de las vulnerabilidades.
- Solución: actualizar a 0.0.15 o posterior.
Description
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
NVD description
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.
Más vulnerabilidades de langchain-experimental
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free