{"schema":"vulnpedia.research/1","cve":"CVE-2026-106119","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95"},{"source":"nvd","sourceId":"CVE-2026-106119","modified":"2026-10-06T20:17:17.820","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://github.com/langchain-ai/langchainjs/security/advisories/GHSA-m6rx-h84q-8r95"}]},{"url":"https://github.com/langchain-ai/langchainjs/pull/11672","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","url":"https://github.com/langchain-ai/langchainjs/pull/11672"},{"source":"nvd","sourceId":"CVE-2026-106119","modified":"2026-10-06T20:17:17.820","url":"https://github.com/langchain-ai/langchainjs/pull/11672"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://github.com/langchain-ai/langchainjs/pull/11672"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://github.com/langchain-ai/langchainjs/pull/11672"}]},{"url":"https://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","url":"https://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af"},{"source":"nvd","sourceId":"CVE-2026-106119","modified":"2026-10-06T20:17:17.820","url":"https://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://github.com/langchain-ai/langchainjs/commit/946e3d856ff1f8ce7f7b9374c83f680a6ada79af"}]},{"url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T18:01:24.262Z","url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1"},{"source":"nvd","sourceId":"CVE-2026-106119","modified":"2026-10-06T20:17:17.820","url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://github.com/langchain-ai/langchainjs/releases/tag/@langchain/mongodb@1.3.1"}]},{"url":"https://osv.dev/vulnerability/GHSA-m6rx-h84q-8r95","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","origins":[{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://osv.dev/vulnerability/GHSA-m6rx-h84q-8r95"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://osv.dev/vulnerability/GHSA-m6rx-h84q-8r95"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106119","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","origins":[{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106119"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106119"}]},{"url":"https://github.com/langchain-ai/langchainjs","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","origins":[{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://github.com/langchain-ai/langchainjs"},{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://github.com/langchain-ai/langchainjs"}]},{"source":"euvd","sourceId":"EUVD-2026-93771","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93771","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93771","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93771"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","url":"https://osv.dev/vulnerability/GHSA-m6rx-h84q-8r95","ecosystem":"npm","name":"@langchain/mongodb","purl":"pkg:npm/%40langchain/mongodb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.1"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 1.3.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-m6rx-h84q-8r95/GHSA-m6rx-h84q-8r95.json"},"modified":"2026-10-08T18:00:08.902627724Z","origins":[{"source":"ghsa","sourceId":"GHSA-m6rx-h84q-8r95","modified":"2026-10-08T18:00:08.902627724Z","url":"https://osv.dev/vulnerability/GHSA-m6rx-h84q-8r95"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}