Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

LangChain Experimental vulnerable to arbitrary code execution

Fix availableCritical · CVSS 9.3EPSS 0.77%

Published Feb 26, 2024 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: langchain-experimental 0.0.52.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIlangchain-experimental412,215 downloads/week

Vulnerable versions
< 0.0.52
Fixed in
0.0.52

Check your project: pip show langchain-experimental

Sources

CWE-749 Exposed Dangerous Method or Function

← All critical vulnerabilities