{"action":"Upgrade langchain-experimental to 0.0.61 or later.","affected":[{"fixed":"0.0.61","introduced":"0"}],"component":"langchain-experimental","cve_ids":["CVE-2024-38459"],"ecosystem":"PyPI","epss":0.00227,"exploited":false,"fixed_versions":["0.0.61"],"ghsa_id":"GHSA-wmvm-9vqv-5qpp","id":"tcs_01M5KG2GS8P11J5PYT04S62N5W","modified_at":"2024-07-05T22:04:11.161311Z","published_at":"2024-06-16T15:30:44Z","references":["https://osv.dev/vulnerability/GHSA-wmvm-9vqv-5qpp","https://nvd.nist.gov/vuln/detail/CVE-2024-38459","https://github.com/langchain-ai/langchain/pull/22860","https://github.com/langchain-ai/langchain/commit/ce0b0f22a175139df8f41cdcfb4d2af411112009","https://github.com/langchain-ai/langchain","https://github.com/langchain-ai/langchain/compare/langchain-experimental==0.0.60...langchain-experimental==0.0.61","https://github.com/pypa/advisory-database/tree/main/vulns/langchain-experimental/PYSEC-2024-53.yaml"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-wmvm-9vqv-5qpp","url":"https://osv.dev/vulnerability/GHSA-wmvm-9vqv-5qpp"}],"summary":"langchain_experimental Code Execution via Python REPL access"}