SOURCE-LINKED INTELLIGENCE
GHSA-8h5w-f6q9-wg35: Langchain SQL Injection vulnerability
In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.
Read original source ↗ Open in workspace
- recordType
- vulnerability
- status
- active
- evidenceStatus
- reported
- region
- Global
Evidence & attribution
- OSV AI package advisories · 2023-10-21T00:30:47.000Z
- OSV AI package advisories · 2026-06-29T11:50:43.657Z
First collected: 2026-09-19T20:26:55.867Z. This is not the publication date.