Approved changes feed: RSS · Atom

cpe:2.3:a:langchain:langchain:0.0.64:*:*:*:*:*:*:*

part: a version: 0.0.64 update: *

VendorLangchain (3bec1db6-30f1-5f7c-8067-d161076b8e16)
ProductLangchain (470aaf7d-9be4-5ab2-a1f8-1df85c8b7784)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hwchase17/langchain purl2cpe 2026-06-01 10:15:39.362084
pkg:npm/langchain purl2cpe 2026-06-01 10:15:39.362085
pkg:pypi/langchain purl2cpe 2026-06-01 10:15:39.362086
pkg:sourceforge/langchain.mirror purl2cpe 2026-06-01 10:15:39.362088

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36189 vulnerable 2026-06-08 06:06:28.642089 Details available
SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-10-15T18:34:19.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36188 vulnerable 2026-06-08 06:06:28.641496 Details available
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
Published: 2023-07-06T00:00:00.000Z
Updated: 2024-11-19T19:03:23.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.