nvd-json-data-feeds/CVE-2024/CVE-2024-274xx/CVE-2024-27444.json

{
  "id": "CVE-2024-27444",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-02-26T16:28:00.430",
  "lastModified": "2024-02-26T16:32:25.577",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py."
    },
    {
      "lang": "es",
      "value": "langchain_experimental (tambi\u00e9n conocido como LangChain Experimental) en LangChain anterior a 0.1.8 permite a un atacante eludir la correcci\u00f3n CVE-2023-44467 y ejecutar c\u00f3digo arbitrario a trav\u00e9s de the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute en c\u00f3digo Python. Estos no est\u00e1n prohibidos por pal_chain/base.py."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/langchain-ai/langchain/commit/de9a6cdf163ed00adaf2e559203ed0a9ca2f1de7",
      "source": "cve@mitre.org"
    }
  ]
}