{"id":"CGA-jwhp-53p8-6mph","modified":"2026-07-31T08:13:01.205522197Z","published":"2025-11-04T03:39:44Z","withdrawn":"2026-07-31T08:13:01.205522043Z","upstream":["CVE-2024-7042","GHSA-6m59-8fmv-m5f9"],"references":[{"type":"FIX","url":"https://github.com/langchain-ai/langchainjs/commit/615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6"},{"type":"WEB","url":"https://huntr.com/bounties/b612defb-1104-4fff-9fef-001ab07c7b2d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7042.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7042"}],"affected":[{"package":{"name":"kibana-8-bitnami","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/kibana-8-bitnami?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.16.1-r1"}]}],"ecosystem_specific":{"components":[{"component_version":"0.2.18","component_type":"npm","component_location":"/usr/share/kibana/node_modules/@langchain/community/package.json","component_purl":"pkg:npm/%40langchain%2Fcommunity@0.2.18","latest_event_status":"fixed","latest_event_timestamp":"2024-11-26T14:42:41Z","architecture":"x86_64","component_name":"@langchain/community"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jwhp-53p8-6mph.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}