langchain/libs/core/tests
Eugene Yurtsev e8339b1d83
core[patch]: Patch XML vulnerability in XMLOutputParser (CVE-2024-1455) (#19653)
Patch potential XML vulnerability CVE-2024-1455

This patches a potential XML vulnerability in the XMLOutputParser in
langchain-core. The vulnerability in some situations could lead to a
denial of service attack.

At risk are users that:

1) Running older distributions of python that have older version of
libexpat
2) Are using XMLOutputParser with an agent
3) Accept inputs from untrusted sources with this agent (e.g., endpoint
on the web that allows an untrusted user to interact wiith the parser)
2024-03-27 12:41:52 -04:00
..
integration_tests core[patch], langchain[patch]: fix required deps (#14373) 2023-12-07 14:24:58 -08:00
unit_tests core[patch]: Patch XML vulnerability in XMLOutputParser (CVE-2024-1455) (#19653) 2024-03-27 12:41:52 -04:00
__init__.py Separate out langchain_core package (#13577) 2023-11-20 13:09:30 -08:00