Vulnerability	Vulnerable Version
M Eval Injection langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses. Affected versions of this package are vulnerable to Eval Injection in `SymbolicMathChain` component, through the `sympify` function. An attacker can execute arbitrary commands or code by supplying malicious input to this function. How to fix Eval Injection? Upgrade `langchain-experimental` to version 0.3.1 or higher.	[0.0.58,0.3.1)

Eval Injection

langchain-experimental is a package that holds experimental LangChain code, intended for research and experimental uses.

Affected versions of this package are vulnerable to Eval Injection in SymbolicMathChain component, through the sympify function. An attacker can execute arbitrary commands or code by supplying malicious input to this function.

How to fix Eval Injection?

Upgrade langchain-experimental to version 0.3.1 or higher.

[0.0.58,0.3.1)

Go back to all versions of this package