CVE-2023-36281 Information

Description

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.

Reference

https://github.com/hwchase17/langchain/issues/4394 https://aisec.today/LangChain-2e6244a313dd46139c5ef28cbcab9e55

Share on: