Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-27135
9.8
CRITICALCVSS v3
Published
February 25, 2025
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.
infiniflow/ragflow
GitHubRAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
GitHubRAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs<= 0.15.1NVD