Please use LangChain VDP and LangChain Open Source VDP to report security vulnerabilities.
Security: langchain-ai/langchainjs
Security
SECURITY.md
-
SSRF Bypass in RecursiveUrlLoader via redirect chainingGHSA-mphv-75cg-56wg published
Feb 23, 2026 by hntrlModerate -
SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validationGHSA-gf3v-fwqg-4vh7 published
Feb 11, 2026 by hntrlModerate -
LangChain serialization injection vulnerability enables secret extractionGHSA-r399-636x-v7f6 published
Dec 23, 2025 by hntrlHigh
Learn more about advisories related to langchain-ai/langchainjs in the GitHub Advisory Database