langchain-ai/langchainjs @langchain/community@1.1.14

on GitHub

Patch Changes

• #9990 d5e3db0 Thanks @hntrl! - feat(core): Add SSRF protection module (@langchain/core/utils/ssrf) with utilities for validating URLs against private IPs, cloud metadata endpoints, and localhost.

  fix(community): Harden RecursiveUrlLoader against SSRF attacks by integrating validateSafeUrl and replacing string-based URL comparison with origin-based isSameOrigin from the shared SSRF module.

• Updated dependencies [d5e3db0, 6939dab, ad581c7]:

  • @langchain/core@1.1.21
  • @langchain/openai@1.2.7
  • @langchain/classic@1.0.17