Approved changes feed: RSS · Atom

cpe:2.3:a:langchain:langchain:0.0.245:*:*:*:*:*:*:*

part: a version: 0.0.245 update: *

VendorLangchain (3bec1db6-30f1-5f7c-8067-d161076b8e16)
ProductLangchain (470aaf7d-9be4-5ab2-a1f8-1df85c8b7784)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hwchase17/langchain purl2cpe 2026-06-01 10:15:38.815694
pkg:npm/langchain purl2cpe 2026-06-01 10:15:38.815695
pkg:pypi/langchain purl2cpe 2026-06-01 10:15:38.815696
pkg:sourceforge/langchain.mirror purl2cpe 2026-06-01 10:15:38.815698

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39631 vulnerable 2026-06-08 06:09:37.841785 Details available
An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
Published: 2023-09-01T00:00:00.000Z
Updated: 2024-10-01T13:18:38.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.