CVE-2024-23751

LlamaIndex aka llamaindex through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorSQLQueryEngine. For example, an attacker might be able to delete this year's student records via "Dro...

CVE-2024-23751

creationtimestamp| type| source ---|---|--- 2024-01-22 02:21:34+00:00| seen| https://t.me/ctinow/170953 2024-02-16 08:16:37+00:00| seen| https://t.me/ctinow/186171...