Publish GHSA-7gfq-f96f-g85j

This commit is contained in:
advisory-database[bot]
2023-11-17 22:28:46 +00:00
parent a67fa1d9f8
commit 20f644fe74
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7gfq-f96f-g85j",
"modified": "2023-08-31T14:25:01Z",
"modified": "2023-11-17T22:27:16Z",
"published": "2023-08-22T21:30:27Z",
"aliases": [
"CVE-2023-36281"
],
"summary": "langchain vulnerable to arbitrary code execution",
"details": "An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.",
"details": "An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the `load_prompt` parameter. This is related to `__subclasses__` or a template.",
"severity": [
{
"type": "CVSS_V3",