{"action":"Upgrade @langchain/community to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0"}],"component":"@langchain/community","cve_ids":["CVE-2024-7042"],"ecosystem":"npm","epss":0.00311,"exploited":false,"fixed_versions":["0.3.3"],"ghsa_id":"GHSA-6m59-8fmv-m5f9","id":"tcs_01M5KF7EFTY4AP878TRB31EHMR","modified_at":"2026-08-07T08:12:12.018963169Z","published_at":"2024-10-29T15:32:05Z","references":["https://osv.dev/vulnerability/GHSA-6m59-8fmv-m5f9","https://nvd.nist.gov/vuln/detail/CVE-2024-7042","https://github.com/langchain-ai/langchainjs/commit/615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6","https://github.com/langchain-ai/langchainjs","https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2024-114.yaml","https://huntr.com/bounties/b612defb-1104-4fff-9fef-001ab07c7b2d"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-6m59-8fmv-m5f9","url":"https://osv.dev/vulnerability/GHSA-6m59-8fmv-m5f9"}],"summary":"@langchain/community SQL Injection vulnerability"}