{"api_version":"v1","generated_at":"2026-10-09T15:15:00+00:00","product":{"cve_count":5,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-langchain-ai-langchainjs-f54d06c53543","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"langchainjs","next_cursor":null,"observations":[{"affected":"langchainjs: < 1.5.14; mongodb: < 1.3.1","affected_versions_present":true,"cve_id":"CVE-2026-106119","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-106119","fixed":"1.3.1.","last_modified":"2026-10-06T19:45:43.997Z","patch_url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95","primary_source":"","published":"2026-10-06T18:01:24.262Z"},{"affected":"langchainjs: < 1.1.1; redis: < 1.1.1","affected_versions_present":true,"cve_id":"CVE-2026-105799","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-105799","fixed":"1.1.1.","last_modified":"2026-10-06T17:39:51.463Z","patch_url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-5x6v-p487-7qh2","primary_source":"","published":"2026-10-06T14:45:38.154Z"},{"affected":"< 1.1.18","affected_versions_present":true,"cve_id":"CVE-2026-27795","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27795","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-25T18:42:52.277Z","patch_url":"https://github.com/langchain-ai/langchainjs/commit/2812d2b2b9fd9343c4850e2ab906b8cf440975ee","primary_source":"","published":"2026-02-25T17:30:01.106Z"},{"affected":"< 1.1.14","affected_versions_present":true,"cve_id":"CVE-2026-26019","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-26019","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-12T21:14:41.756Z","patch_url":"https://github.com/langchain-ai/langchainjs/pull/9990","primary_source":"","published":"2026-02-11T21:11:10.166Z"},{"affected":"@langchain/core >= 1.0.0, < 1.1.8; @langchain/core < 0.3.80; langchain >= 1.0.0, < 1.2.3; langchain < 0.3.37","affected_versions_present":true,"cve_id":"CVE-2025-68665","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-68665","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-12-24T14:38:40.268Z","patch_url":"https://github.com/langchain-ai/langchainjs/commit/e5063f9c6e9989ea067dfdff39262b9e7b6aba62","primary_source":"","published":"2025-12-23T22:56:04.837Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"langchain-ai"}}