Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@langchain/community

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
npm

Advisories 3

  • CVE-2026-27795Medium 4.1

    LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader

    Affected: fixed in 1.1.18.

  • CVE-2026-26019Medium 4.1

    @langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation

    Affected: fixed in 1.1.14.

  • CVE-2024-7042Medium 4.9

    Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

    Affected: fixed in 0.3.3.