sql-injection

Records23

1. closed3.1
   MCP servers & tools CVE-2026-126198: pgEdge Postgres MCP Server bypasses write confirmation for custom tools

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126198

   AI
2. closed8.1
   MCP servers & tools CVE-2026-126196: pgEdge Postgres MCP Server permits multi‑statement writes on read‑only connections

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126196

   AI
3. closed8.8
   MCP servers & tools CVE-2026-126197: pgEdge Postgres MCP Server vulnerable to JSON‑based SQL injection

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126197

   AI
4. closed6.8
   MCP servers & tools CVE-2026-126199: pgEdge Postgres MCP Server allows SQL queries without write confirmation

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126199

   AI
5. closed8.4
   NVIDIA NeMo CVE-2026-65151: NVIDIA NeMo Agent Toolkit SQL injection vulnerability

   Patch now · Disclosed · since 27 Oct 2026 · CVE-2026-65151

   AI
6. closed
   Claude Anthropic Research Model Scans Targets and Compromises Application

   Research · since 30 Jul 2026

   AI
7. closed7.6
   LangChain4j SQL Injection in LangChain4j Embedding Stores

   Patch now · Disclosed · since 10 Jul 2026 · CVE-2026-55405

   AI
8. closed8.8
   Dify CVE-2026-61461: Dify SQL Injection Vulnerability in MyScale Vector Store

   Patch now · Disclosed · since 10 Jul 2026 · CVE-2026-61461

   AI
9. closed8.7
   Agno Agno contains a SQL injection vulnerability in ClickHouse vector database backend

   Patch now · Disclosed · since 29 May 2026 · CVE-2026-10105

   AI
10. closed9.8
    LiteLLM CVE-2026-42208: LiteLLM proxy API key verification SQL injection

    Patch now · Disclosed · since 24 Apr 2026 · updated 8 May 2026 · CVE-2026-42208

    AI
11. closed8.8
    AnythingLLM CVE-2026-32628: AnythingLLM SQL Injection in SQL Agent

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32628

    AI
12. closed7.3
    LangChain family CVE-2025-8709: SQL injection vulnerability in LangGraph SQLite store

    Patch now · Disclosed · since 26 Oct 2025 · CVE-2025-8709

    AI
13. closed5.4
    LiteLLM CVE-2025-45809: SQL injection vulnerability in BerriAI LiteLLM

    Patch now · Disclosed · since 3 Jul 2025 · CVE-2025-45809

    AI
14. closed9.8
    LlamaIndex CVE-2025-1793: LlamaIndex SQL Injection Vulnerability

    Patch now · Disclosed · since 5 Jun 2025 · CVE-2025-1793

    AI
15. closed7.6
    Flowise CVE-2025-29189: Flowise SQL Injection Vulnerability

    Patch now · Disclosed · since 9 Apr 2025 · CVE-2025-29189

    AI
16. closed7.1
    LlamaIndex CVE-2024-12911: LlamaIndex Prompt Injection and SQL Injection Flaw

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12911

    AI
17. closed4.9
    LangChain family CVE-2024-8309: LangChain GraphCypherQAChain SQL injection vulnerability

    Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-8309

    AI
18. closed4.9
    LangChain family CVE-2024-7042: LangChainJS GraphCypherQAChain SQL injection vulnerability

    Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-7042

    AI
19. closed4.9
    LiteLLM CVE-2024-4890: SQL Injection Vulnerability in LiteLLM

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4890

    AI
20. closed6.4
    LiteLLM CVE-2024-5225: SQL Injection Vulnerability in LiteLLM

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-5225

    AI
21. closed9.8
    LlamaIndex CVE-2024-23751: SQL injection vulnerability in LlamaIndex

    Patch now · Disclosed · since 22 Jan 2024 · CVE-2024-23751

    AI
22. closed9.8
    LangChain family CVE-2023-32785: Langchain SQL Injection vulnerability

    Patch now · Disclosed · since 21 Oct 2023 · CVE-2023-32785

    AI
23. closed8.7
    LangChain family CVE-2023-36189: Langchain SQL Injection vulnerability

    Patch now · Disclosed · since 6 Jul 2023 · CVE-2023-36189

    AI