Skip to contentLangchain-ai Langchainjs vulnerabilities
- @feathersjs mongodb, langchain-ai langchainjs +1 moreLangChain: MongoDBChatMessageHistory query injection can allow cross-session accessCVE-2026-106119Fix available6.0 Medium
- @langchain redis, langchain-ai langchainjs +1 moreLangChain: RediSearch Filter Injection via Unescaped Tag/Text ValuesCVE-2026-105799Fix available2.3 Low
- langchain community, langchain-ai langchainjs +1 moreLangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoaderCVE-2026-27795Fix available4.1 Medium
- langchain community, langchain-ai langchainjs +1 more@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationCVE-2026-26019Fix available4.1 Medium
- langchain langchain.js, langchain\/core, langchain-ai langchainjs +2 moreLangChain serialization injection vulnerability enables secret extractionCVE-2025-68665Fix available8.6 High
- langchain, langchain-ai langchain-ai/langchainjs, langchainjs +2 morePrompt Injection in langchain-ai/langchainjs Leading to SQL InjectionCVE-2024-7042Fix available4.9 Medium
- langchain-ai langchain-ai/langchainjs, langchain langchain.js, langchain-ai langchain-ai\/langchainjs +2 morePath Traversal in langchain-ai/langchainjsCVE-2024-7774Fix available6.5 Medium