Product by Langchain-ai

    Langchainjs

    5 known vulnerabilities in Langchainjs (Langchain-ai), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Langchainjs (Langchain-ai)
    CriticalCVE-2025-68665

    LangChain serialization injection vulnerability enables secret extraction

    also in 1 other product

    8.6
    MediumCVE-2026-106119

    LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

    also in 2 other products

    —
    LowCVE-2026-105799

    LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

    also in 2 other products

    —
    MediumCVE-2026-26019

    Langchain-ai Langchainjs: Server-Side Request Forgery (SSRF)

    also in 2 other products

    4.1
    HighCVE-2026-27795

    LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

    also in 1 other product

    4.1

    All products by Langchain-ai