CVE-2023-32786
HIGH7.5EPSS 0.14%Langchain Server-Side Request Forgery vulnerability
Published: 10/21/2023Modified: 2/16/2024
Description
In Langchain before 0.0.329, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.
Affected packages (1)
- PyPI/langchainfrom 0, < 0.0.329
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |