CVE-2026-50180
2 advisories.
PyPI/langroid CVE-2026-50180: high
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Action: Upgrade langroid to 0.64.0 or later.
pip install langroid==0.64.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.0 | - |
Fixed versions
| 0.64.0 |
Sources
- osv: GHSA-pmch-g965-grmr
- https://github.com/langroid/langroid/security/advisories/GHSA-pmch-g965-grmr
- https://github.com/langroid/langroid/commit/00b7dd7b79c5d03c94be284cf3459d98195ebfba
- https://github.com/langroid/langroid
CVE-2026-50180 · published · modified · JSON
PyPI/langroid CVE-2026-50180: unknown
Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read
Action: Upgrade langroid to 0.64.0 or later.
pip install langroid==0.64.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.0 | - |
Fixed versions
| 0.64.0 |
Sources
- osv: PYSEC-2026-2580
- https://github.com/langroid/langroid/security/advisories/GHSA-pmch-g965-grmr
- https://github.com/langroid/langroid/commit/00b7dd7b79c5d03c94be284cf3459d98195ebfba
- https://github.com/langroid/langroid
- https://pypi.org/project/langroid
- https://github.com/advisories/GHSA-pmch-g965-grmr
- https://nvd.nist.gov/vuln/detail/CVE-2026-50180
CVE-2026-50180 · published · modified · JSON