We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05).
Reserved 2024-09-15 | Published 2024-09-19 | Updated 2024-09-19 | Assigner mitrecwe.mitre.org/data/definitions/95.html
github.com/...ain/releases/tag/langchain-experimental==0.3.0
docs.sympy.org/latest/modules/codegen.html
gist.github.com/12end/68c0c58d2564ef4141bccd4651480820
Support options
