From 9cf54f35b8f5b3227d851037655dcc2e9e10dc7f Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 12:09:07 +0000
Subject: [PATCH] Publish GHSA-f2jm-rw3h-6phg

---
 .../09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json    | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2024/09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json b/advisories/github-reviewed/2024/09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json
index 96393b1b7a8..bf16c45a9dc 100644
--- a/advisories/github-reviewed/2024/09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json
+++ b/advisories/github-reviewed/2024/09/GHSA-f2jm-rw3h-6phg/GHSA-f2jm-rw3h-6phg.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f2jm-rw3h-6phg",
-  "modified": "2024-09-17T21:23:31Z",
+  "modified": "2024-09-20T12:07:36Z",
   "published": "2024-09-17T12:30:32Z",
   "aliases": [
     "CVE-2024-5998"
   ],
   "summary": "LangChain pickle deserialization of untrusted data",
-  "details": "A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.10.",
+  "details": "A vulnerability in the `FAISS.deserialize_from_bytes` function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the `os.system` function. The issue affects versions prior to 0.2.4.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -22,7 +22,7 @@
     {
       "package": {
         "ecosystem": "PyPI",
-        "name": "langchain"
+        "name": "langchain-community"
       },
       "ranges": [
         {
@@ -32,7 +32,7 @@
               "introduced": "0"
             },
             {
-              "fixed": "0.2.10"
+              "fixed": "0.2.4"
             }
           ]
         }
@@ -46,7 +46,7 @@
     },
     {
       "type": "WEB",
-      "url": "https://github.com/langchain-ai/langchain/commit/604dfe2d99246b0c09f047c604f0c63eafba31e7"
+      "url": "https://github.com/langchain-ai/langchain/commit/77209f315efd13442ec51c67719ba37dfaa44511"
     },
     {
       "type": "PACKAGE",