Approved changes feed: RSS · Atom

cpe:2.3:a:langchain:langchain_experimental:0.0.14:*:*:*:*:python:*:*

part: a version: 0.0.14 update: *

VendorLangchain (3bec1db6-30f1-5f7c-8067-d161076b8e16)
ProductLangchain Experimental (e3529812-a172-5007-a61b-b6a0d1f71c95)
Edition*
Language*
Software edition*
Target softwarepython
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-44467 vulnerable 2026-06-08 06:12:41.068248 Details available
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.
Published: 2023-10-09T00:00:00.000Z
Updated: 2024-08-02T20:07:33.144Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.