https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 04:38:47 +0000 https://db.gcve.eu/vuln/cve-2024-7774 <p><strong>Affected:</strong> langchain-ai/langchainjs, langchain-ai\/langchainjs</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> <p><strong>Affected:</strong> langchain-ai/langchainjs, langchain-ai\/langchainjs</p> <p>A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.</p> https://db.gcve.eu/vuln/cve-2024-7774