{"action":"Upgrade langchain to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0"}],"component":"langchain","cve_ids":["CVE-2024-8309"],"ecosystem":"PyPI","epss":0.13738,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-45pg-36p6-83v9","id":"tcs_01M5KGT0VHPV81N497HGSS0TV6","modified_at":"2026-07-07T17:57:12.591755527Z","published_at":"2026-07-07T14:34:43.617965Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1507","https://nvd.nist.gov/vuln/detail/CVE-2024-8309","https://github.com/langchain-ai/langchain/commit/64c317eba05fbac0c6a6fc5aa192bc0d7130972e","https://github.com/langchain-ai/langchain/commit/c2a3021bb0c5f54649d380b42a0684ca5778c255","https://github.com/langchain-ai/langchain","https://github.com/pypa/advisory-database/tree/main/vulns/langchain/PYSEC-2024-115.yaml","https://huntr.com/bounties/8f4ad910-7fdc-4089-8f0a-b5df5f32e7c5","https://pypi.org/project/langchain","https://github.com/advisories/GHSA-45pg-36p6-83v9"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-1507","url":"https://osv.dev/vulnerability/PYSEC-2026-1507"}],"summary":"Langchain SQL Injection vulnerability"}