Junglewise Threat Intelligence
CVE-2024-38459: PYSEC-2024-53 - langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; th
CVE-2024-38459 · Severity: low · CVSS 3.1 · Published 2024-06-16
Technologies: langchain-experimental (PyPI). Vendors: PyPI.
Executive brief
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.
Affected products
- PyPI langchain-experimental