Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•38 views

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

SQLChatAgent validatequery dangerous-pattern regex is bypassable via quoted/commented/qualified function names SummaryThe SQLChatAgent SQL-injection mitigation, with default allowdangerousoperations=False, combines a raw-text regex blocklist DANGEROUSSQLPATTERNS with a sqlglot SELECT-only stateme...

9.3CVSS6.2AI score0.00646EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder