Skip to content
OpenAdvisories

Product · @langchain

mongodb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2026-106119

    LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

    LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured session identifier at runtime, allowing the identifier to be interpreted as a Mon…

    langchain-ai @langchain langchainjs mongodb npm