Langchain SQL Injection vulnerability
Critical severity
GitHub Reviewed
Published
Oct 21, 2023
to the GitHub Advisory Database
•
Updated Dec 29, 2023
Description
Published by the National Vulnerability Database
Oct 20, 2023
Published to the GitHub Advisory Database
Oct 21, 2023
Reviewed
Oct 24, 2023
Last updated
Dec 29, 2023
In Langchain through 0.0.155, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.
References