Three patched LangGraph flaws could let attackers chain SQL injection and unsafe deserialization for RCE in self-hosted ...
Security: SQL Injection in cache.getEntire () server/database/cache.ts 中的 getEntire () 方法在构建 SQL 查询时直接将 keys 数组拼接到 SQL 字符串中，未使用参数化查询，存在 SQL 注入漏洞。 问题位置 server/database/cache.ts 第 35-45 行附近的 getEntire ( ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results