CVE-2024-2057
1 advisory.
PyPI/langchain-community CVE-2024-2057: critical 9.8
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.26 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-278
- https://github.com/bayuncao/vul-cve-16/tree/main/PoC.pkl
- https://vuldb.com/?ctiid.255372
- https://vuldb.com/?id.255372
- https://github.com/langchain-ai/langchain/pull/18695
- https://github.com/bayuncao/vul-cve-16
CVE-2024-2057 · published · modified · JSON