Skip to content
OpenAdvisories
High · 7.5 CVE-2023-36189 EUVD-2023-0111GHSA-7q94-qpjr-xpgmPYSEC-2023-110

langchain SQL Injection vulnerability

Published Jul 6, 2023 · Updated Oct 15, 2024 · Assigned by mitre

Package: langchain Ecosystem: PyPI

Description

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI langchain < 0.0.247 0.0.247 GHSA-7q94-qpjr-xpgm

References