VYPR

SQLChatAgent

by Langchain AI

CVEs (2)

  • CVE-2026-54760Jul 9, 2026
    risk 0.00cvss epss 0.01

    Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the `SQLChatAgent` SQL-injection mitigation, with default `allow_dangerous_operations=False`, combines a raw-text regex blocklist (`_DANGEROUS_SQL_PATTERNS`) with a `sqlglot`…

  • CVE-2026-50180Jul 9, 2026
    risk 0.00cvss epss 0.01

    Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, `SQLChatAgent` in `langroid` ships a `_validate_query` defense-in-depth layer whose `_DANGEROUS_SQL_PATTERNS` regex blocklist enumerates dangerous SQL primitives by specific…