Knowledge base
CodexGuild Knowledge Base

langchain SQL Injection vulnerability

as of Jul 6, 2023 · applies to langchain >= 0, < 0.0.247 · canonical · codexguild.com/kb/ghsa-7q94-qpjr-xpgm · exported 2026-10-11
Canonical as of Jul 6, 2023

langchain SQL Injection vulnerability

High severity. Affects langchain >= 0, < 0.0.247. Upgrade to 0.0.247 or later.

CVE-2023-36189 / GHSA-7q94-qpjr-xpgm · severity: high · CVSS 7.5 · PyPI

Affected

  • langchain >= 0, < 0.0.247 → fixed in 0.0.247

Details

SQL injection vulnerability in langchain allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.

Source: GHSA-7q94-qpjr-xpgm — GitHub Advisory Database (CC-BY-4.0).