Please use LangChain VDP and LangChain Open Source VDP to report security vulnerabilities.
Security: langchain-ai/langchainjs
Security
SECURITY.md
-
RediSearch Filter Injection via Unescaped Tag/Text ValuesGHSA-5x6v-p487-7qh2 published
Aug 6, 2026 by vladislav-nechakhinLow -
SSRF Bypass in RecursiveUrlLoader via redirect chainingGHSA-mphv-75cg-56wg published
Feb 23, 2026 by hntrlModerate -
SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationGHSA-gf3v-fwqg-4vh7 published
Feb 11, 2026 by hntrlModerate -
LangChain serialization injection vulnerability enables secret extractionGHSA-r399-636x-v7f6 published
Dec 23, 2025 by hntrlHigh
Learn more about advisories related to langchain-ai/langchainjs in the GitHub Advisory Database