custom-chat-gpt (0.3.0), furchain (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-55443 via langchain (0.1.4)

langchain PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - custom-chat-gpt 0.3.0 - furchain =0.1.0, =0.6.0, =0.8.0 - vocode 0.1.112a0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

lunary access control error vulnerability (CNVD-2025-09704)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which can be exploited by an attacker to cause information disclosure...

Lunary security vulnerabilities

lunary is lunary open source a production toolkit for LLM . An elevation of privilege vulnerability exists in lunary that stems from a lack of authorization checking and can be exploited by an attacker to delete any dataset...