pypi numexpr vulnerabilities

Latest pypi numexpr CVEs

Newest publication first

1. CVE-2023-39631 Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

   Published 2023-09-01

   Critical·CVSS 9.8 EPSS 1.6%

   An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.