Approved changes feed: RSS · Atom

cpe:2.3:a:langchain:langchain:0.0.194:*:*:*:*:*:*:*

part: a version: 0.0.194 update: *

VendorLangchain (3bec1db6-30f1-5f7c-8067-d161076b8e16)
ProductLangchain (470aaf7d-9be4-5ab2-a1f8-1df85c8b7784)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hwchase17/langchain purl2cpe 2026-06-01 10:15:38.815378
pkg:npm/langchain purl2cpe 2026-06-01 10:15:38.815380
pkg:pypi/langchain purl2cpe 2026-06-01 10:15:38.815381
pkg:sourceforge/langchain.mirror purl2cpe 2026-06-01 10:15:38.815382

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36095 vulnerable 2026-06-08 06:06:28.556608 Details available
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_object_prompt.
Published: 2023-08-05T00:00:00.000Z
Updated: 2024-10-17T14:47:07.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.