https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 03:03:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335871 EUVD-2026-335871 https://cve.radiocsirt.org/vuln/euvd-2026-335871 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55405 <p>LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter() can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores&#39; search and removeAll(Filter) operations, enabling blind data exfiltration, denial of service via sleep functions, and deletion of arbitrary rows through removeAll(Filter). This issue is fixed in langchain4j-mariadb and langchain4j-pgvector versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26.</p> <p>LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string values, directly into the query without adequate escaping. A crafted metadata key in EmbeddingSearchRequest.filter() can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores&#39; search and removeAll(Filter) operations, enabling blind data exfiltration, denial of service via sleep functions, and deletion of arbitrary rows through removeAll(Filter). This issue is fixed in langchain4j-mariadb and langchain4j-pgvector versions 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55405 https://cve.radiocsirt.org/vuln/ghsa-2mfg-cc43-9pcj <p><strong>Affected:</strong> Maven: dev.langchain4j:langchain4j-mariadb, Maven: dev.langchain4j:langchain4j-pgvector</p> <p>### Summary The MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter **keys** (and, in MariaDB, string **values**) directly into the query without adequate escaping. A crafted metadata key in `EmbeddingSearchRequest.filter()` can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores&#39; search and `removeAll(Filter)` operations.</p> <p>### Details **pgvector — JSON mode (default, `COMBINED_JSON` / `COMBINED_JSONB`).** `JSONFilterMapper` places the key inside a single-quoted SQL literal (the JSON key of the `-&gt;&gt;` operator) with no escaping:</p> <p>(metadata-&gt;&gt;&#39;&lt;key&gt;&#39;)::text</p> <p>A key containing a single quote breaks out, e.g. `metadataKey(&#34;&#39;)::text IS NOT NULL OR pg_sleep(1) IS NOT NULL --&#34;)` injects a live `pg_sleep(1)` (observable as a delay; exploitable for blind data extraction).</p> <p>**pgvector — column mode (`COLUMN_PER_KEY`).** `ColumnFilterMapper` used the key as a bare, unquoted, unvalidated SQL identifier (`&lt;key&gt;::&lt;type&gt;`), so a key such as `1=1 OR true --` injects directly.</p> <p>**MariaDB — JSON mode (default).** `JSONFilterMapper` placed the key inside the JSON path literal `&#39;$.&lt;key&gt;&#39;` unescaped (same break-out mechanism). Additionally, `MariaDbFilterMapper.formatValue()` escaped `&#39;` but not `\`; because MariaDB treats backslash as an escape character by default, a string value ending in a backslash could also break out of its literal.</p> <p>**MariaDB — column mode (`COLUMN_PER_KEY`).** `ColumnFilterMapper`…</p> <p><strong>Affected:</strong> Maven: dev.langchain4j:langchain4j-mariadb, Maven: dev.langchain4j:langchain4j-pgvector</p> <p>### Summary The MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter **keys** (and, in MariaDB, string **values**) directly into the query without adequate escaping. A crafted metadata key in `EmbeddingSearchRequest.filter()` can break out of its SQL context and inject arbitrary SQL into the statements executed by the stores&#39; search and `removeAll(Filter)` operations.</p> <p>### Details **pgvector — JSON mode (default, `COMBINED_JSON` / `COMBINED_JSONB`).** `JSONFilterMapper` places the key inside a single-quoted SQL literal (the JSON key of the `-&gt;&gt;` operator) with no escaping:</p> <p>(metadata-&gt;&gt;&#39;&lt;key&gt;&#39;)::text</p> <p>A key containing a single quote breaks out, e.g. `metadataKey(&#34;&#39;)::text IS NOT NULL OR pg_sleep(1) IS NOT NULL --&#34;)` injects a live `pg_sleep(1)` (observable as a delay; exploitable for blind data extraction).</p> <p>**pgvector — column mode (`COLUMN_PER_KEY`).** `ColumnFilterMapper` used the key as a bare, unquoted, unvalidated SQL identifier (`&lt;key&gt;::&lt;type&gt;`), so a key such as `1=1 OR true --` injects directly.</p> <p>**MariaDB — JSON mode (default).** `JSONFilterMapper` placed the key inside the JSON path literal `&#39;$.&lt;key&gt;&#39;` unescaped (same break-out mechanism). Additionally, `MariaDbFilterMapper.formatValue()` escaped `&#39;` but not `\`; because MariaDB treats backslash as an escape character by default, a string value ending in a backslash could also break out of its literal.</p> <p>**MariaDB — column mode (`COLUMN_PER_KEY`).** `ColumnFilterMapper`…</p> https://cve.radiocsirt.org/vuln/ghsa-2mfg-cc43-9pcj