CodexGuild Knowledge Base
Langchain vulnerable to arbitrary code execution
Canonical as of Jun 20, 2023
Langchain vulnerable to arbitrary code execution
Critical severity. Affects langchain < 0.0.247. Upgrade to 0.0.247 or later.
CVE-2023-34541 / GHSA-6643-h7h5-x9wh · severity: critical · CVSS 9.8 · PyPI
Affected
langchain< 0.0.247 → fixed in 0.0.247
Details
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
Source: GHSA-6643-h7h5-x9wh — GitHub Advisory Database (CC-BY-4.0).