Skip to content
OpenAdvisories

Vendor

@langchain

3 known vulnerabilities.

Products

langchain_community 1 redis 1 mongodb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-105799

    LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

    LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alt…

    langchain-ai @langchain langchainjs redis npm