← Back to browse · API

CVE-2023-36281

Severity
CRITICAL
CVSS
9.8
EPSS
0.02854
Risk score
40.2
CISA KEV
No
PoC
No
Published
2023-08-22
Modified
2024-10-15
First seen
2026-08-07
Aliases
EUVD-2023-0116, GHSA-7GFQ-F96F-G85J, PYSEC-2023-151
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-0116

Description

An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt. This is related to __subclasses__ or a template.

References