CVE-2024-38459
CVE-2024-38459
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444.
CVSS 7.8 · Élevée · EPSS 0,2% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: python
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
langchain-experimental PyPI
- Versions du logiciel
- 0.0.1
- 0.0.10
- 0.0.11
- 0.0.12
- 0.0.13
- 0.0.14
- 0.0.15
- 0.0.16
- 0.0.17
- 0.0.18
- 0.0.19
- 0.0.1rc1
- 0.0.1rc2
- 0.0.1rc3
- 0.0.1rc4
- 0.0.2
- 0.0.20
- 0.0.21
- 0.0.22
- 0.0.23
- 0.0.24
- 0.0.25
- 0.0.27
- 0.0.28
- 0.0.29
- 0.0.3
- 0.0.30
- 0.0.31
- 0.0.32
- 0.0.33
- 0.0.34
- 0.0.35
- 0.0.36
- 0.0.37
- 0.0.38
- 0.0.39
- 0.0.4
- 0.0.40
- 0.0.41
- 0.0.42
- 0.0.43
- 0.0.44
- 0.0.45
- 0.0.46
- 0.0.47
- 0.0.48
- 0.0.49
- 0.0.5
- 0.0.50
- 0.0.51
- 0.0.52
- 0.0.53
- 0.0.54
- 0.0.55
- 0.0.56
- 0.0.57
- 0.0.58
- 0.0.59
- 0.0.6
- 0.0.60
- 0.0.7
- 0.0.8
- 0.0.9
- Plages de versions concernées
- ECOSYSTEM: < 0.0.61
Mettez à jour vers 0.0.61
langchain-experimental PyPI
- Versions du logiciel
- 0.0.1
- 0.0.10
- 0.0.11
- 0.0.12
- 0.0.13
- 0.0.14
- 0.0.15
- 0.0.16
- 0.0.17
- 0.0.18
- 0.0.19
- 0.0.1rc1
- 0.0.1rc2
- 0.0.1rc3
- 0.0.1rc4
- 0.0.2
- 0.0.20
- 0.0.21
- 0.0.22
- 0.0.23
- 0.0.24
- 0.0.25
- 0.0.27
- 0.0.28
- 0.0.29
- 0.0.3
- 0.0.30
- 0.0.31
- 0.0.32
- 0.0.33
- 0.0.34
- 0.0.35
- 0.0.36
- 0.0.37
- 0.0.38
- 0.0.39
- 0.0.4
- 0.0.40
- 0.0.41
- 0.0.42
- 0.0.43
- 0.0.44
- 0.0.45
- 0.0.46
- 0.0.47
- 0.0.48
- 0.0.49
- 0.0.5
- 0.0.50
- 0.0.51
- 0.0.52
- 0.0.53
- 0.0.54
- 0.0.55
- 0.0.56
- 0.0.57
- 0.0.58
- 0.0.59
- 0.0.6
- 0.0.60
- 0.0.7
- 0.0.8
- 0.0.9
- langchain-couchbase==0.0.1
- langchain-community==0.2.4
- langchain==0.2.3
- langchain-core==0.2.5
- langchain-together==0.1.3
- langchain-community==0.2.3
- langchain-nomic==0.1.2
- langchain-huggingface==0.0.3
- langchain-ai21==0.1.6
- langchain-robocorp==0.0.9.post1
- langchain-mongodb==0.1.6
- langchain-groq==0.1.5
- langchain-milvus==0.1.1
- langchain-experimental==0.0.60
- langchain-community==0.2.2
- langchain==0.2.2
- langchain-mistralai==0.1.8
- langchain-huggingface==0.0.2
- langchain-text-splitters==0.2.1
- langchain-core==0.2.4
- langchain-anthropic==0.1.15
- langchain-core==0.2.3
- langchain-robocorp==0.0.9
- langchain-cli==0.0.24
- langchain-openai==0.1.8
- langchain-core==0.2.2
- langchain-milvus==0.1.0
- langchain-anthropic==0.1.14rc2
- langchain-cli==0.0.23
- langchain-openai==0.1.8rc1
- langchain-anthropic==0.1.14rc1
- langchain-core==0.2.2rc1
- langchain-community==0.2.1
- langchain==0.2.1
- langchain-robocorp==0.0.8
- langchain-core==0.2.1
- langchain-nomic==0.1.1
- langchain-experimental==0.0.59
- langchain-community==0.2.0
- langchain==0.2.0
- langchain-text-splitters==0.2.0
- langchain-core==0.2.0
- langchain-anthropic==0.1.13
- langchain-upstage==0.1.5
- langchain-text-splitters==0.0.2
- langchain-fireworks==0.1.3
- langchain-pinecone==0.1.1
- langchain-exa==0.1.0
- langchain-airbyte==0.1.1
- langchain-ibm==0.1.7
- langchain-voyageai==0.1.1
- langchain-together==0.1.2
- langchain-robocorp==0.0.7
- langchain-qdrant==0.1.0
- langchain-prompty==0.0.2
- langchain-nomic==0.1.0
- langchain-mongodb==0.1.5
- langchain-mistralai==0.1.7
- langchain-groq==0.1.4
- langchain-azure-dynamic-sessions==0.1.0
- langchain-anthropic==0.1.12
- langchain-ai21==0.1.5
- langchain-chroma==0.1.1
- langchain-openai==0.1.7
- langchain-mongodb==0.1.4
- langchain-core==0.2.0rc1
- langchain-qdrant==0.0.1
- langchain-huggingface==0.0.1
- langchain-prompty==0.0.1
- langchain-community==0.2.0rc1
- langchain-cli==0.0.22
- langchain-azure-dynamic-sessions==0.1.0rc0
- langchain==0.2.0rc2
- langchain-upstage==0.1.4
- langchain-ibm==0.1.6
- langchain-robocorp==0.0.6
- langchain-experimental==0.0.58
- langchain-together==0.1.1
- langchain-core==0.1.52
- langchain-community==0.0.37
- langchain-core==0.1.51
- langchain-ibm==0.1.5
- langchain-openai==0.1.6
- langchain-core==0.1.50
- langchain-mistralai==0.1.6
- langchain-openai==0.1.5
- langchain-ai21==0.1.4
- langchain==0.1.17
- langchain-community==0.0.36
- langchain-core==0.1.48
- langchain-community==0.0.35
- langchain-core==0.1.47
- v0.1.16
- v0.1.15
- v0.1.14
- v0.1.13
- v0.1.12
- v0.1.11
- v0.1.10
- v0.1.9
- v0.1.8
- v0.1.7
- v0.1.6
- v0.1.5
- v0.1.4
- v0.1.3
- v0.1.2
- v0.1.1
- v0.1.0
- v0.0.354
- v0.0.353
- v0.0.352
- v0.0.351
- v0.0.350
- v0.0.349
- v0.0.349-rc.2
- v0.0.349-rc.1
- v0.0.347
- v0.0.348
- v0.0.346
- v0.0.345
- v0.0.344
- v0.0.343
- v0.0.342
- v0.0.341
- v0.0.339rc3
- v0.0.339rc2
- v0.0.340
- v0.0.339
- v0.0.339rc1
- v0.0.339rc0
- v0.0.338
- v0.0.337
- v0.0.336
- v0.0.335
- v0.0.334
- v0.0.333
- v0.0.332
- v0.0.331rc3
- v0.0.331rc2
- v0.0.331rc1
- v0.0.331rc0
- v0.0.331
- v0.0.330
- v0.0.329
- v0.0.327
- v0.0.326
- v0.0.325
- v0.0.324
- v0.0.323
- v0.0.322
- v0.0.321
- v0.0.320
- v0.0.319
- v0.0.318
- v0.0.317
- v0.0.316
- v0.0.315
- v0.0.314
- v0.0.313
- v0.0.312
- v0.0.311
- v0.0.310
- v0.0.309
- v0.0.308
- v0.0.307
- v0.0.306
- v0.0.305
- v0.0.304
- v0.0.303
- v0.0.302
- v0.0.301
- v0.0.298
- v0.0.300
- v0.0.299
- v0.0.297
- v0.0.296
- v0.0.295
- v0.0.294
- v0.0.293
- v0.0.292
- v0.0.291
- v0.0.290
- v0.0.289
- v0.0.288
- v0.0.287
- v0.0.286
- v0.0.285
- v0.0.284
- v0.0.283
- v0.0.281
- v0.0.279
- v0.0.278
- v0.0.277
- v0.0.276
- v0.0.275
- v0.0.274
- v0.0.273
- v0.0.272
- v0.0.271
- v0.0.270
- v0.0.269
- v0.0.268
- v0.0.267
- v0.0.266
- v0.0.265
- v0.0.264
- v0.0.263
Mettez à jour vers 0.0.61
Sources originales
- https://github.com/langchain-ai/langchain/pull/22860
- https://github.com/langchain-ai/langchain/commit/ce0b0f22a175139df8f41cdcfb4d2af411112009
- https://github.com/langchain-ai/langchain/compare/langchain-experimental==0.0.60...langchain-experimental==0.0.61
- https://nvd.nist.gov/vuln/detail/CVE-2024-38459