VYPR

langchain4j-pgvector

by Langchain4j

CVEs (2)

  • CVE-2026-55405HigJul 10, 2026
    risk 0.49cvss 7.6epss 0.00

    LangChain4j is a Java library for building LLM-powered applications on the JVM. Prior to 1.2.1-beta8, 1.5.1-beta11, 1.11.8-beta19, and 1.16.3-beta26, the MariaDB and pgvector embedding stores build metadata-filter SQL by string-concatenating filter keys, and in MariaDB string…

  • CVE-2026-97869MedSep 25, 2026
    risk 0.20cvss 4.1epss 0.00

    A flaw has been found in langchain4j up to 1.5.3-beta10/1.11.10-beta18/1.18.1-beta27. This vulnerability affects the function AgenticScopeSerializer.fromJson of the file AgenticScopeJsonSerializationIT.java of the component LangChain4j-agentic. This manipulation causes…