mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-07 05:28:59 +00:00
24 lines
1.2 KiB
JSON
24 lines
1.2 KiB
JSON
{
|
|
"id": "CVE-2024-27444",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2024-02-26T16:28:00.430",
|
|
"lastModified": "2024-02-26T16:32:25.577",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "langchain_experimental (aka LangChain Experimental) in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute in Python code. These are not prohibited by pal_chain/base.py."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "langchain_experimental (tambi\u00e9n conocido como LangChain Experimental) en LangChain anterior a 0.1.8 permite a un atacante eludir la correcci\u00f3n CVE-2023-44467 y ejecutar c\u00f3digo arbitrario a trav\u00e9s de the __import__, __subclasses__, __builtins__, __globals__, __getattribute__, __bases__, __mro__, or __base__ attribute en c\u00f3digo Python. Estos no est\u00e1n prohibidos por pal_chain/base.py."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://github.com/langchain-ai/langchain/commit/de9a6cdf163ed00adaf2e559203ed0a9ca2f1de7",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |