https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:26:48.260455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8309 CVE-2024-8309 — SQL Injection in langchain-ai/langchain 2026-10-02T12:26:48.262361+00:00

Affected: langchain-ai/langchain, langchain-ai langchain

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.

 https://cve.radiocsirt.org/vuln/ghsa-45pg-36p6-83v9 GHSA-45pg-36p6-83v9 — Langchain SQL Injection vulnerability 2026-10-02T12:26:48.262430+00:00

Affected: PyPI: langchain-community, PyPI: langchain

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.