An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
"https://github.com/pypa/advisory-database/blob/main/vulns/langchain/PYSEC-2023-151.yaml"