langchainjs vulnerabilities

CVEs whose affected-version data names the langchainjs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106119Medium· 6.0

yesterday

LangChain is a framework for building LLM-powered applications

LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured session identifier at runtime, allowing the identifier to b…

▾ Sunlitlangchain-ai · langchainjsvia NVD