Description
LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search query. When an application uses an attacker-influenceable filter as a tenant or document-access boundary, the modified query can expose indexed documents outside the attacker's intended scope. This issue is fixed in version 1.1.1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
langchain-ai langchainjs
< 1.1.1affected
@langchain redis
< 1.1.1affected
References
- https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2 ↗
- https://github.com/langchain-ai/langchainjs/pull/10701 ↗
- https://github.com/langchain-ai/langchainjs/commit/880e3969ea643a2147777a4d5e8bd606a697edf7 ↗
- https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/redis@1.1.1 ↗