Vendor

langchain4j

1 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.6

CVE-2026-55405

LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector

LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and …

langchain4j langchain4j dev.langchain4j:langchain4j-pgvector dev.langchain4j:langchain4j-mariadb Maven

Jul 10, 2026