llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-47214 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-47214 Source advisory: OSV:PYSEC-2026-2146...

CVE-2026-56062

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

CVE-2026-56062

The CVE identifies an unauthenticated SQL injection in the WordPress Quotes llama plugin, affecting versions up to and including 3.1.5. The vulnerability arises in Quotes llama’s handling of input data, allowing unauthenticated attackers to potentially execute SQL commands. The CVSS base score is...

EUVD-2026-39716

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

CVE-2026-56062 WordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

CVE-2026-56062 WordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

CVE-2026-56062: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

PT-2026-52769

Unauthenticated SQL Injection in Quotes llama = 3.1.5 versions...

WordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by ParkHyunWoo in WordPress Plugin Quotes llama versions = 3.1.5...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-44017 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-44017 Source advisory: OSV:PYSEC-2026-2143...

llama-lime (>=0.1.15, <=0.1.16) potentially affected by CVE-2026-55443 via langchain (0.0.267)

langchain PYPI version 0.0.267 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llama-lime =0.1.15, =0.1.16 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

arxiv-bot (>=0.0.5, <=0.0.6), langchain-utils (>=0.3.18, <=0.3.24) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.141)

langchain PYPI version 0.0.141 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - arxiv-bot =0.0.5, =0.3.18, =0.1.0, =1.0.1, =0.0.1, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

llama-agi (0.2.0), osnap-client (>=0.1.0, <=0.1.1a0) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.154)

langchain PYPI version 0.0.154 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llama-agi 0.2.0 - osnap-client =0.1.0, =0.0.27, =0.0.30 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

devtale (>=0.1.2, <=0.1.4), gitmaid (0.1.0) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.251)

langchain PYPI version 0.0.251 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - devtale =0.1.2, =0.1.0, =0.4.0, =0.5.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

atradebot (0.1.0), jaankoppe-llama-index (>=0.8.26.post2, <=0.8.26.post3) potentially affected by CVE-2026-55443 via langchain (0.0.262)

langchain PYPI version 0.0.262 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - atradebot 0.1.0 - jaankoppe-llama-index =0.8.26.post2, =0.8.26.post3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

embedchain (>=0.0.82rc8, <=0.1.0rc1), evo-researcher (>=0.1.4, <=0.1.10) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.303)

langchain PYPI version 0.0.303 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - embedchain =0.0.82rc8, =0.1.4, =0.2.10, =0.4.0, =0.5.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

langserve (0.0.1), llama-cpp-http (0.2.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.304)

langchain PYPI version 0.0.304 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langserve 0.0.1 - llama-cpp-http 0.2.9 - openbrain =0.13.0, =0.1.0, =0.2.13 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

embedchain (>=0.0.82rc8, <=0.1.0rc1), evo-researcher (>=0.1.4, <=0.1.10) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.303)

langchain PYPI version 0.0.303 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - embedchain =0.0.82rc8, =0.1.4, =0.2.10, =0.4.0, =0.5.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

llama-agi (0.2.0), osnap-client (>=0.1.0, <=0.1.1a0) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.154)

langchain PYPI version 0.0.154 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llama-agi 0.2.0 - osnap-client =0.1.0, =0.0.27, =0.0.30 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

llama-lime (>=0.1.15, <=0.1.16) potentially affected by CVE-2026-55443 via langchain (0.0.267)

langchain PYPI version 0.0.267 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llama-lime =0.1.15, =0.1.16 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...