CERT24pysec-2024-115: SQL injection vulnerability in GraphCypherQAChain via prompt injectionLoading data…
CERT24Threat Observatory
Period

pysec-2024-115: SQL injection vulnerability in GraphCypherQAChain via prompt injection

The CERT source describes a vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 and, in a related entry, langchain version 0.2.5. The vulnerability allows SQL injection through prompt injection.

← Back to intelligence

pysec-2024-115: SQL injection vulnerability in GraphCypherQAChain via prompt injection

The CERT source describes a vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 and, in a related entry, langchain version 0.2.5. The vulnerability allows SQL injection through prompt injection.