{"data":{"ecosystem":"npm","name":"@langchain/community","url":"https://aisecwatch.com/packages/npm/@langchain/community","latestVersion":"1.1.29","firstReleaseAt":"2023-12-08T01:08:42.046Z","repository":"https://github.com/langchain-ai/langchainjs-community","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-12-08T01:08:42.046Z","integratedVersion":"0.0.0","sdks":["langchain"],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"npm","name":"@langchain/classic","versionSpec":"^1.0.27","scope":"runtime"},{"ecosystem":"npm","name":"@langchain/openai","versionSpec":"^1.4.1","scope":"runtime"},{"ecosystem":"npm","name":"binary-extensions","versionSpec":"^2.2.0","scope":"runtime"},{"ecosystem":"npm","name":"flat","versionSpec":"^5.0.2","scope":"runtime"},{"ecosystem":"npm","name":"js-yaml","versionSpec":"^4.1.1","scope":"runtime"},{"ecosystem":"npm","name":"langsmith","versionSpec":">=0.4.0 <1.0.0","scope":"runtime"},{"ecosystem":"npm","name":"math-expression-evaluator","versionSpec":"^2.0.0","scope":"runtime"},{"ecosystem":"npm","name":"uuid","versionSpec":"^14.0.0","scope":"runtime"},{"ecosystem":"npm","name":"zod","versionSpec":"^3.25.76 || ^4","scope":"runtime"}],"advisories":[{"id":"b9541707-aa44-488f-b44b-74e8caf518ad","url":"https://aisecwatch.com/issues/b9541707-aa44-488f-b44b-74e8caf518ad","cveId":"CVE-2026-27795","title":"CVE-2026-27795: LangChain is a framework for building LLM-powered applications. Prior to version 1.1.8, a redirect-based Server-Side…","severity":"medium","publishedAt":"2026-02-25T18:23:41.153Z","affected":["@langchain/community@<= 1.1.17 (fixed: 1.1.18)"],"epssScore":0.00383},{"id":"047041d6-4758-4d2b-91cd-82b229a533ce","url":"https://aisecwatch.com/issues/047041d6-4758-4d2b-91cd-82b229a533ce","cveId":"CVE-2026-26019","title":"CVE-2026-26019: LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in…","severity":"medium","publishedAt":"2026-02-11T22:15:51.910Z","affected":["@langchain/community@<= 1.1.13 (fixed: 1.1.14)"],"epssScore":0.00393},{"id":"71639523-7827-42bf-90bd-edfcc5881aca","url":"https://aisecwatch.com/issues/71639523-7827-42bf-90bd-edfcc5881aca","cveId":"CVE-2024-7042","title":"CVE-2024-7042: A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this…","severity":"critical","publishedAt":"2024-10-29T17:15:08.883Z","affected":["@langchain/community@< 0.3.3 (fixed: 0.3.3)"],"epssScore":0.00311}],"checkedAt":"2026-10-09T21:51:40.036Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}