CVE-2023-32785

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-36189. Notes: All CVE users should reference CVE-2023-36189 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-36189. Reason: This record is a duplicate of CVE-2023-36189. Notes: All CVE users should reference CVE-2023-36189 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36189 via langchain (>=0.0.27, <=0.0.246)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36189 Source advisory: GHSA-7Q94-QPJR-XPGM...

CVE-2023-36189

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36189 via langchain (>=0.0.27, <=0.0.246)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36189 Source advisory: OSV:PYSEC-2023-110...

CVE-2023-36189

CVE-2023-36189 describes an SQL injection vulnerability in the langchain project, specifically through the SQLDatabaseChain component. The issue is triggered by unvalidated input reaching the SQLDatabaseChain, allowing a remote attacker to obtain sensitive information. Public sources consistently...

CVE-2023-36189

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...

agent-actors (0.1.0), agent-lab-sdk (>=0.1.7, <=0.1.16) +183 more potentially affected by CVE-2023-36189 via langchain (>=0.0.27, <=0.0.246)

langchain PYPI version =0.0.27, =0.1.7, =0.2.1, =0.1.0, =0.1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.14, =0.1.9, =0.0.33, =0.1.0a0, =0.2.0, =0.3.0 and more Source cves: CVE-2023-36189 Source advisory: MEND:CVE-2023-36189...

CVE-2023-36189

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...