19 matches found
pdd-cli (>=0.0.18, <=0.0.21), structured-sql-agent (0.1.0) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.8)
langchain-anthropic PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - pdd-cli =0.0.18, =0.0.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2556...
markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-26013 via langchain-core (0.3.74)
langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...
pdd-cli (>=0.0.18, <=0.0.21), structured-sql-agent (0.1.0) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.8)
langchain-anthropic PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - pdd-cli =0.0.18, =0.0.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
agentfoundry (>=1.3.9, <=1.3.10), markitdown-pro (>=1.0.0, <=2.2.0) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.29)
langchain-openai PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry =1.3.9, =1.0.0, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-41488 Source advisory:...
actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +6 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.9)
langchain-text-splitters PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =0.1.0, =1.0.25122300, =1.0.0, =0.1.0, =0.1.1 - structured-sql-agent 0.1.0 Source...
agentfoundry (>=1.3.9, <=1.3.10), markitdown-pro (>=1.0.0, <=2.2.0) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.29)
langchain-openai PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry =1.3.9, =1.0.0, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-41488 Source advisory:...
markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.74)
langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.74)
langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
CVE-2026-32628
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628: Improper Neutralization of Special Elements used in an SQL Command
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
EUVD-2026-12138
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)
langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...
markitdown-pro (>=1.0.0, <=2.2.0), structured-sql-agent (0.1.0) potentially affected by CVE-2026-26013 via langchain-core (0.3.74)
langchain-core PYPI version 0.3.74 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - markitdown-pro =1.0.0, =2.2.0 - structured-sql-agent 0.1.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...
CA BrightStor ARCserve Backup Agent - 'dbasqlr.exe' Remote Overflow
/ CA BrightStor ARCserve Backup Agent for SQL - dbasqlr.exe cybertronicatgmxdotnet / include include include include define PORT 6070 unsigned char bindshell = "\xeb\x19\x5e\x31\xc9\x81\xe9\x89\xff\xff\xff\x81\x36\x80\xbf\x32" "\x94\x81\xee\xfc\xff\xff\xff\xe2\xf2\xeb\x05\xe8\xe2\xff\xff\xff"...
CA BrightStor ARCserve Backup Agent (dbasqlr.exe) Remote Exploit
Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor ARCserve Backup Agent dbasqlr.exe Remote Exploit ================================================================ / CA BrightStor ARCserve Backup Agent for SQL -...
