{"vulnerability": "cve-2025-46724", "sightings": [{"uuid": "a868d430-4f4e-4355-8a83-e488fade96e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3me2x7obf6t25", "content": "", "creation_timestamp": "2026-02-04T22:44:09.260113Z"}, {"uuid": "0c99329e-7f55-4e94-b85b-91c0b51bacf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46724\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableChatAgent` by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.\n\ud83d\udccf Published: 2025-05-20T17:22:13.475Z\n\ud83d\udccf Modified: 2025-05-20T17:23:50.936Z\n\ud83d\udd17 References:\n1. https://github.com/langroid/langroid/security/advisories/GHSA-jqq5-wc57-f8hj\n2. https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6", "creation_timestamp": "2025-05-20T17:43:48.000000Z"}, {"uuid": "f08f2ed8-2e81-4773-8708-fc4364d770cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-46724", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lqdo2hm5ys25", "content": "", "creation_timestamp": "2025-05-29T21:30:15.895588Z"}]}