CVE-2024-3571
2 advisories.
PyPI/langchain CVE-2024-3571: medium 6.5
langchain vulnerable to path traversal
Action: Upgrade langchain to 0.0.353 or later.
pip install langchain==0.0.353Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.353 | - |
Fixed versions
| 0.0.353 |
Sources
- osv: GHSA-rgp8-pm28-3759
- https://nvd.nist.gov/vuln/detail/CVE-2024-3571
- https://github.com/langchain-ai/langchain/commit/aad3d8bd47d7f5598156ff2bdcc8f736f24a7412
- https://github.com/langchain-ai/langchain
- https://huntr.com/bounties/2df3acdc-ee4f-4257-bbf8-a7de3870a9d8
CVE-2024-3571 · published · modified · JSON
PyPI/langchain CVE-2024-3571: medium 6.5
langchain vulnerable to path traversal
Action: Upgrade langchain to 0.0.353 or later.
pip install langchain==0.0.353Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.353 | - |
Fixed versions
| 0.0.353 |
Sources
- osv: PYSEC-2026-1510
- https://nvd.nist.gov/vuln/detail/CVE-2024-3571
- https://github.com/langchain-ai/langchain/commit/aad3d8bd47d7f5598156ff2bdcc8f736f24a7412
- https://github.com/langchain-ai/langchain
- https://huntr.com/bounties/2df3acdc-ee4f-4257-bbf8-a7de3870a9d8
- https://pypi.org/project/langchain
- https://github.com/advisories/GHSA-rgp8-pm28-3759
CVE-2024-3571 · published · modified · JSON