@langchain
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| langchain_community | 1 | – | Mar 1, 2024 |
| mongodb | 1 | – | Oct 6, 2026 |
| redis | 1 | – | Oct 6, 2026 |
Exploited and recent CVEs
- CVE-2026-106119 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access 0.5%
- CVE-2026-105799 LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values 0.3%
- CVE-2024-2057 LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery 0.6%