치명취약점
langchain vulnerable to arbitrary code execution
GHSA-57fc-8q82-gfp3 · CVE-2023-36188 · PYSEC-2023-109 · 갱신 2026. 7. 7.
영향 받는 패키지
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| PyPI | langchain | 0.0.247 |
원문
출처
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-36188
- WEBhttps://github.com/langchain-ai/langchain/issues/5872
- WEBhttps://github.com/langchain-ai/langchain/pull/6003
- WEBhttps://github.com/langchain-ai/langchain/pull/8425
- WEBhttps://github.com/langchain-ai/langchain/commit/e294ba475a355feb95003ed8f1a2b99942509a9e
- ADVISORYhttps://github.com/advisories/GHSA-57fc-8q82-gfp3
- PACKAGEhttps://github.com/langchain-ai/langchain
- WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2023-109.yaml