Medium
osv
ยท
GHSA-7gfq-f96f-g85j
langchain vulnerable to arbitrary code execution
Published Aug 22, 2023
CVSS 4.0
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the `load_prompt` parameter. This is related to `__subclasses__` or a template.
Affected AI Products
langchain