| Package | Affected versions | Patched versions |
|---|---|---|
| langchain-experimental | ≤ 0.0.14< 0.0.15 | 0.0.15 |
| langchain experimental | = 0.0.14 |
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via import in Python code, which is not prohibited by pal_chain/base.py.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free