{"action":"Upgrade langchain to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0"}],"component":"langchain","cve_ids":["CVE-2024-8309"],"ecosystem":"PyPI","epss":0.13738,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-45pg-36p6-83v9","id":"tcs_01M5KEXAB57DN6RW9VMWS38TFN","modified_at":"2026-07-07T17:57:12.591755527Z","published_at":"2024-10-29T15:32:05Z","references":["https://osv.dev/vulnerability/GHSA-45pg-36p6-83v9","https://nvd.nist.gov/vuln/detail/CVE-2024-8309","https://github.com/langchain-ai/langchain/commit/64c317eba05fbac0c6a6fc5aa192bc0d7130972e","https://github.com/langchain-ai/langchain/commit/c2a3021bb0c5f54649d380b42a0684ca5778c255","https://github.com/langchain-ai/langchain","https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2024-115.yaml","https://huntr.com/bounties/8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-45pg-36p6-83v9#PyPI/langchain","url":"https://osv.dev/vulnerability/GHSA-45pg-36p6-83v9"}],"summary":"Langchain SQL Injection vulnerability"}