AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2023-32785criticalPrompt injection2023-10-21

CVE-2023-32785: Langchain SQL Injection vulnerability

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

01.

What it is

In Langchain before 0.0.247, prompt injection allows execution of arbitrary code against the SQL service provided by the chain.

02.

How to check

  1. Affected: langchain (pip) < 0.0.247.
  2. Compare your installed version with the range above (command below).
03.

How to fix

  1. Upgrade langchain to 0.0.247 or later.
pip show langchain | grep Version
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.