Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Boazwasserman

#26401de 53,638
9.8CVSS total
Vulnerabilidades · 1
PT-2023-26641
9.8
2023-08-15
Langchain · Langchain · CVE-2023-38860
**Name of the Vulnerable Software and Affected Versions** LangChain versions 0.0.231 through 0.0.246 **Description** An issue in LangChain allows a remote attacker to execute arbitrary code via the `prompt` parameter. This enables the attacker to potentially gain control over the system, leading to severe consequences. **Recommendations** For LangChain versions 0.0.231 through 0.0.246, update to version 0.0.247 or later to resolve the issue. As a temporary workaround, consider restricting access to the `prompt` parameter to minimize the risk of exploitation.