LE
Product
Langchain Experimental
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch
Add Langchain Experimental to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-46946 | 9.8 | Sep 19 | langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in… Affected: 0.1.17 through 0.3.0 |
| CVE-2024-27444 | 9.8 | Feb 26 | langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__,… Affected: before 0.1.8 |
| CVE-2023-44467 | 9.8 | Oct 9 | langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in… Affected: 0.0.14 |
| CVE-2024-21513 | 8.5 | Jul 15 | Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will… Affected: 0.0.15 before 0.0.21 |
| CVE-2024-38459 | 7.8 | Jun 16 | langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step Affected: before 0.0.61 |
Showing 5