CRITICAL9.8
PYSEC-2023-145
Quick fix
PYSEC-2023-145 — langchain: upgrade to the fixed version with the command below.
pip install --upgrade 'langchain>=0.0.247'Details
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
Are you affected?
Enter the version of the package you're using.