Please use LangChain VDP and LangChain Open Source VDP to report security vulnerabilities.
Security: langchain-ai/langchain-mongodb
Security
SECURITY.md
-
Arbitrary code execution via `eval` in MongoDB agent toolkit aggregation parsingGHSA-wpfx-pfqp-3r5x published
Sep 22, 2026 by vladislav-nechakhinHigh -
NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposureGHSA-533j-2v4q-mw5h published
Jun 11, 2026 by jkennedyvzHigh
Learn more about advisories related to langchain-ai/langchain-mongodb in the GitHub Advisory Database