avalagent (1.0.0), browser-use-undetected (>=0.2.5, <=0.2.5.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.23)

langchain-openai PYPI version 0.3.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - avalagent 1.0.0 - browser-use-undetected =0.2.5, =0.2.10, =0.0.7, =3.2.1, =3.2.5 Source cves: CVE-2026-41488 Source advisory:...

athina (>=0.3.2, <=1.2.19), converso (0.1.1) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.3)

langchain-openai PYPI version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - athina =0.3.2, =0.6.0, =0.8.0 - rebuff 0.1.1 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

bisheng-langchain (>=0.3.0b0, <=0.3.4.dev3) potentially affected by CVE-2026-41488 via langchain-openai (0.1.0)

langchain-openai PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bisheng-langchain =0.3.0b0, =0.3.4.dev3 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

carton-mcp (>=0.1.80, <=0.1.83), heaven-framework (>=0.1.24, <=0.1.36) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.22)

langchain-openai PYPI version 0.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.1.0, =0.0.4, =0.0.6 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

brevia (>=0.0.26, <=0.0.35), chatur-chains (0.1.1) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.6)

langchain-openai PYPI version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - brevia =0.0.26, =0.2.0rc0, =0.0.3, =0.0.4, =1.4.0, =2.0.0 - vector-cli 0.2.0 Source cves: CVE-2026-41488 Source advisory:...

chemgraphagent (>=0.2.0, <=0.2.1), cogniweave (>=0.1.1, <=0.1.10) +12 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.27)

langchain-openai PYPI version 0.3.27 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - chemgraphagent =0.2.0, =0.1.1, =1.5.0, =0.3.0, =0.3.0, =0.2.0, =0.0.1.dev0, =3.3.0, =0.2.1, =0.3.2 Source cves: CVE-2026-41488...

ambientagi (>=0.1.1, <=0.2.12), browser-use (>=0.1.38, <=0.1.40) +14 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.1)

langchain-openai PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ambientagi =0.1.1, =0.1.38, =0.1.3, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.1.0, =1.1.40, =0.13.0, =0.14.1 -...

dialog-lib (>=0.0.1.1, <=0.0.1.18), genai-agents (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.6)

langchain-openai PYPI version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - dialog-lib =0.0.1.1, =0.1.0, =0.2.0, =0.1.8, =0.1.0b0, =0.1.0b4 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

bugbug (0.0.550), okazaki (>=0.0.2, <=0.0.4) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.17)

langchain-openai PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.550 - okazaki =0.0.2, =0.1.1, =0.1.0, =0.3.3, =0.0.3, =0.7.0 Source cves: CVE-2026-41488 Source advisory:...

platform-gen-ai (>=0.1.0, <=0.1.1), ragstack-ai-langchain (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-41488 via langchain-openai (0.1.3)

langchain-openai PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - platform-gen-ai =0.1.0, =1.0.0, =1.0.7 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

agent-society-lib (>=0.1.1, <=0.1.15), ai-rich (>=0.1.3, <=0.1.5) +11 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.0)

langchain-openai PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agent-society-lib =0.1.1, =0.1.3, =0.0.0, =0.16.0, =1.0.2, =0.1.0, =0.0.2, =0.0.0, =0.1.0a1, =0.0.30, =0.0.33 Source cves:...

agent-api-server (>=2.1.7, <=2.1.13), agentc-langchain (1.0.0) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.33)

langchain-openai PYPI version 0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agent-api-server =2.1.7, =0.0.594, =1.0.0rc1, =0.1.0, =0.0.93, =0.1.3, =0.1.4 Source cves: CVE-2026-41488 Source advisory:...

document-qa-engine (>=0.5.1, <=0.6.0), kapso (>=0.1.0, <=0.1.5) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.18)

langchain-openai PYPI version 0.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - document-qa-engine =0.5.1, =0.1.0, =0.1.1, =1.0.0, =1.0.1, =1.0.6 - veee 0.0.3 Source cves: CVE-2026-41488 Source advisory:...

academic-metrics (>=0.1.0b0, <=1.0.99), chaincomposer (>=0.1.2, <=0.1.8) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.9)

langchain-openai PYPI version 0.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - academic-metrics =0.1.0b0, =0.1.2, =0.1.0, =0.2.0 - ia-planner-jerson-gpt 0.1.0 - okazaki 0.4.6 Source cves: CVE-2026-41488 Sour...

brickllm (>=1.0.0, <=1.3.0), bugbug (>=0.0.557, <=0.0.560) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.0)

langchain-openai PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - brickllm =1.0.0, =0.0.557, =0.1.0, =0.0.4, =0.3.49, =0.4.14 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

beehive-ai (>=0.0.1, <=0.0.2), documentgraph (0.1.2) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.1)

langchain-openai PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beehive-ai =0.0.1, =0.0.3, =0.1.0, =0.0.3, =0.0.10 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

aiagentgraph (>=0.0.1, <=0.0.4a1), aicat-annotator (0.0.1) +41 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.7)

langchain-openai PYPI version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagentgraph =0.0.1, =0.8.29, =0.1.0, =1.0.0, =0.0.5, =0.5.0, =0.5.0, =0.5.0, =0.1.1, =2.0.0, =2.0.5 and more Source cves:...

browser-use (>=0.2.6, <=0.3.2), langchain-search-django (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.21)

langchain-openai PYPI version 0.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - browser-use =0.2.6, =0.1.0, =0.7.0 - re-browser-use 0.3.2 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

converso (0.1.0), kgraphplanner (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.20)

langchain-openai PYPI version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - converso 0.1.0 - kgraphplanner =0.0.1, =1.2.15, =0.0.2, =0.0.7, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-41488 Source...

jpl-rosa (>=1.0.3, <=1.0.4), longtrainer (>=0.2.2, <=0.3.0) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.21)

langchain-openai PYPI version 0.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - jpl-rosa =1.0.3, =0.2.2, =0.1.5, =1.0.0, =0.1.0, =0.1.3 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...