Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-8H5W-F6Q9-WG35
HistoryOct 21, 2023 - 12:30 a.m.

Langchain SQL Injection vulnerability

2023-10-2100:30:47
CWE-74
CWE-89
GitHub Advisory Database
github.com
9
langchain
sql injection
arbitrary code execution
security vulnerability
software

AI Score

10

Confidence

High

JSON

In Langchain through 0.0.155, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

Affected configurations

Vulners
Node
langchainlangchainRange≤0.0.155
VendorProductVersionCPE
langchainlangchain*cpe:2.3:a:langchain:langchain:*:*:*:*:*:*:*:*

Related

veracode 1
osv 2
cvelist 1
cve 1
nvd 1
prion 1
veracode
veracode
SQL Injection
2023-10-25 09:20:38
osv
osv
Langchain SQL Injection vulnerability
2023-10-21 00:30:47
CVE-2023-32785
2023-10-20 22:15:10
cvelist
cvelist
CVE-2023-32785
1976-01-01 00:00:00
cve
cve
CVE-2023-32785
2023-10-20 22:15:10
nvd
nvd
CVE-2023-32785
2023-10-20 22:15:10
prion
prion
Design/Logic Flaw
2023-10-20 22:15:00

AI Score

10

Confidence

High

JSON
Related for GHSA-8H5W-F6Q9-WG35
veracode1osv2cvelist1cve1nvd1prion1