Homepage
About Snyk

langchain-experimental@0.0.43 vulnerabilities

Building applications with LLMs through composability

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the langchain-experimental package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Arbitrary Code Execution

langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses.

Affected versions of this package are vulnerable to Arbitrary Code Execution. via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__ or __base__ attributes in Python code.

Note: Code is clearly documented as being risky and the correct mitigation strategy is by executing the code in a sandboxed environment.

How to fix Arbitrary Code Execution?

Upgrade langchain-experimental to version 0.0.52 or higher.

[,0.0.52)
Go back to all versions of this package