1907 matches found
centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-71852 via pypdf (5.6.1)
pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-71852 Source advisory: OSV:GHSA-FWG2-594C-JP42...
LangAlpha v2026.08.05
A vibe investing agent harness LangAlpha is built to help interpret financial markets and support investment decisions. English ｜ 简体中文 ｜ 日本語 Getting Started • API Docs • Agent Core • Backend • Web • TUI • Skills • MCP Pin a curated news brief from the dashboard, kick off idea generation, and...
Security Bulletin: IBM Maximo Application Suite uses langchain_core-0.3.86-py3-none-any.whl which is vulnerable to CVE-2026-34070
Summary IBM Maximo Application Suite uses langchaincore-0.3.86-py3-none-any.whl which is vulnerable to CVE-2026-34070. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-34070 DESCRIPTION: LangChain is a framework for building agen...
PT-2026-76507
Root has patched GHSA-gr75-jv2w-4656 in the langchain package for Root:PyPI. Multiple fixed versions available...
@n8n-plus/n8n-plus (2.32.7), @n8n/n8n-nodes-langchain (>=2.32.0, <=2.33.1) +1 more potentially affected by CVE-2026-77081 via n8n-nodes-base (>=2.32.0, <=2.33.0)
n8n-nodes-base NPM version =2.32.0, =2.32.0, =2.32.0, =2.33.3 Source cves: CVE-2026-77081 Source advisory: SNYK:JS-N8NNODESBASE-20186634...
@n8n/n8n-nodes-langchain (2.34.0) potentially affected by CVE-2026-77081 via n8n-nodes-base (2.34.0)
n8n-nodes-base NPM version 2.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-nodes-base and may be impacted: - @n8n/n8n-nodes-langchain 2.34.0 Source cves: CVE-2026-77081 Source advisory: SNYK:JS-N8NNODESBASE-20186634...
CVE-2026-48121
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
@flutchai/flutch-sdk (>=0.2.7, <=0.2.8), @sonic-agent-kit/agent-setup-lib (>=1.0.5, <=1.0.6) +1 more potentially affected by CVE-2026-48121 via @langchain/langgraph-checkpoint-mongodb (>=0.0.2, <=1.0.0)
@langchain/langgraph-checkpoint-mongodb NPM version =0.0.2, =0.2.7, =1.0.5, =1.0.0, =1.0.27 Source cves: CVE-2026-48121 Source advisory: MEND:CVE-2026-48121...
ROOT-APP-NPM-CVE-2026-27795 CVE-2026-27795 in @langchain/community - Patched by Root
Root has patched CVE-2026-27795 in the @langchain/community package for Root:npm. Multiple fixed versions available...
CLSA-2026-1781571263 TuxCare security update for langchain-core (1 CVE)
TuxCare rebuilt langchain-core to address 1 CVE. Fixed in 0.3.83.post2+tuxcare...
CLSA-2026-1779670108 TuxCare security update for langchain-text-splitters (1 CVE)
TuxCare rebuilt langchain-text-splitters to address 1 CVE. Fixed in 0.3.11.post1+tuxcare...
CLSA-2026-1776126826 TuxCare security update for langchain-core (1 CVE)
TuxCare rebuilt langchain-core to address 1 CVE. Fixed in 0.3.83.post1+tuxcare...
centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-59935 via pypdf (5.6.1)
pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-59935 Source advisory: OSV:PYSEC-2026-3613...
CVE-2026-48121: Improper Neutralization of Special Elements in Data Query Logic
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...
PT-2026-74435
TuxCare rebuilt langchain-core to address 1 CVE. Fixed in 0.3.83.post1+tuxcare...
PT-2026-74855
TuxCare rebuilt langchain-text-splitters to address 1 CVE. Fixed in 0.3.11.post1+tuxcare...
PT-2026-75062
TuxCare rebuilt langchain-core to address 1 CVE. Fixed in 0.3.83.post2+tuxcare...
langchain-timbr (>=2.1.0, <=3.3.0), otat (>=0.1.0, <=0.1.3) +5 more potentially affected by CVE-2026-9856 via transformers (4.57.0)
transformers PYPI version 4.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - langchain-timbr =2.1.0, =0.1.0, =1.0.1, =0.5.3rc2, =1.1.4, =0.0.1, =0.1.3 - vllm-kunlun 0.11.1 Source cves: CVE-2026-9856 Source...
LangAlpha v2026.07.30
A vibe investing agent harness LangAlpha is built to help interpret financial markets and support investment decisions. English ｜ 简体中文 ｜ 日本語 Getting Started • API Docs • Agent Core • Backend • Web • TUI • Skills • MCP Pin a curated news brief from the dashboard, kick off idea generation, and...
