netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-f2jm-rw3h-6phg

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-20 12:09:07 +00:00
parent 9792742ee5
commit 9cf54f35b8
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json
+5 -5
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f2jm-rw3h-6phg",
"modified": "2024-09-17T21:23:31Z",
"modified": "2024-09-20T12:07:36Z",
"published": "2024-09-17T12:30:32Z",
"aliases": [
"CVE-2024-5998"
],
"summary": "LangChain pickle deserialization of untrusted data",
"details": "A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.10.",
"details": "A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.4.",
"severity": [
{
"type": "CVSS_V3",
@@ -22,7 +22,7 @@
{
"package": {
"ecosystem": "PyPI",
"name": "langchain"
"name": "langchain-community"
},
"ranges": [
{
@@ -32,7 +32,7 @@
"introduced": "0"
},
{
"fixed": "0.2.10"
"fixed": "0.2.4"
}
]
}
@@ -46,7 +46,7 @@
},
{
"type": "WEB",
"url": "https://github.com/langchain-ai/langchain/commit/604dfe2d99246b0c09f047c604f0c63eafba31e7"
"url": "https://github.com/langchain-ai/langchain/commit/77209f315efd13442ec51c67719ba37dfaa44511"
},
{
"type": "PACKAGE",