LangChain AI langchainjs

• CVE-2026-106119 Medium 6.0 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access 0.5%
• CVE-2026-105799 Low 2.3 LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values 0.3%
• CVE-2026-27795 Medium 4.1 LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader 0.2%
• CVE-2026-26019 Medium 4.1 @langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation 0.4%
• CVE-2025-68665 High 8.6 LangChain serialization injection vulnerability enables secret extraction 0.8%