CVE-2023-29374: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
(updated )
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
References
Detect and mitigate CVE-2023-29374 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →