Vulnerability Database
296,760
Total vulnerabilities in the database
CVE-2023-39631
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
| Software | From | Fixed in |
|---|---|---|
| langchain / langchain | 0.0.245 | 0.0.245.x |
langchain
|
- | 0.0.308 |
- https://github.com/langchain-ai/langchain/issues/8363
- https://github.com/langchain-ai/langchain/pull/11302
- https://github.com/langchain-ai/langchain/releases/tag/v0.0.308
- https://github.com/pydata/numexpr/issues/442
- https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2023-162.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/numexpr/PYSEC-2023-163.yaml
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime