https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 22 May 2026 15:39:29 +0000 https://db.gcve.eu/sighting/3b122083-e812-4301-9579-69b86d9cec54/export {"uuid": "3b122083-e812-4301-9579-69b86d9cec54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-JQQ5-WC57-F8HJ", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46724\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:22:13.475Z\n\ud83d\udccf Modified: 2025-05-20T17:23:50.936Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "creation_timestamp": "2025-05-20T17:43:48.000000Z"} {"uuid": "3b122083-e812-4301-9579-69b86d9cec54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-JQQ5-WC57-F8HJ", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46724\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:22:13.475Z\n\ud83d\udccf Modified: 2025-05-20T17:23:50.936Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "creation_timestamp": "2025-05-20T17:43:48.000000Z"} https://db.gcve.eu/sighting/3b122083-e812-4301-9579-69b86d9cec54/export Tue, 20 May 2025 17:43:48 +0000 https://db.gcve.eu/sighting/bf05d719-ef57-42e9-8009-7b7490f4a115/export {"uuid": "bf05d719-ef57-42e9-8009-7b7490f4a115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-jqq5-wc57-f8hj", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114541423678244181", "content": "", "creation_timestamp": "2025-05-20T17:50:23.229656Z"} {"uuid": "bf05d719-ef57-42e9-8009-7b7490f4a115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-jqq5-wc57-f8hj", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114541423678244181", "content": "", "creation_timestamp": "2025-05-20T17:50:23.229656Z"} https://db.gcve.eu/sighting/bf05d719-ef57-42e9-8009-7b7490f4a115/export Tue, 20 May 2025 17:50:23 +0000