CVE-2023-29374
CVSS V2 None
CVSS V3 None
Description
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Overview
- CVE ID
- CVE-2023-29374
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2023-04-05T02:15:37
- Last Modified Date
- 2023-04-17T16:57:22
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:langchain:langchain:*:*:*:*:*:*:*:* | 1 | OR | 0.0.131 |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-29374 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29374 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2023-04-17 04:09:20 | Added to TrackCVE | |||
2023-04-17 17:01:03 | 2023-04-17T16:57:22 | CVE Modified Date | updated | |
2023-04-17 17:01:03 | Undergoing Analysis | Analyzed | Vulnerability Status | updated |
2023-04-17 17:01:06 | Weakness Enumeration | new | ||
2023-04-17 17:01:09 | CPE Information | updated |