Homepage
About Snyk

langchain-experimental@0.0.64 vulnerabilities

Building applications with LLMs through composability

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the langchain-experimental package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Eval Injection

langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses.

Affected versions of this package are vulnerable to Eval Injection in SymbolicMathChain component, through the sympify function. An attacker can execute arbitrary commands or code by supplying malicious input to this function.

How to fix Eval Injection?

Upgrade langchain-experimental to version 0.3.1 or higher.

[0.0.58,0.3.1)
Go back to all versions of this package