agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +160 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

PYSEC-2026-76

LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's urltosize helper used by getnumtokensfrommessages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS...

agentfoundry (>=1.3.9, <=1.3.10), markitdown-pro (>=1.0.0, <=2.2.0) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.29)

langchain-openai PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry =1.3.9, =1.0.0, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-41488 Source advisory:...

flotorch-core (>=2.8.1, <=2.10.0), hie-rag (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.13)

langchain-openai PYPI version 0.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - flotorch-core =2.8.1, =0.1.0, =1.2.4, =0.4.1, =0.1.0, =0.2.7 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ai-puti (0.1.0b5), ap-rest-client (>=0.0.1, <=0.0.7) +7 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.8)

langchain-openai PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-puti 0.1.0b5 - ap-rest-client =0.0.1, =0.20.0, =1.1.2, =1.0.0, =0.1.0, =1.3.41 - rulita 0.0.1 - veee 0.0.2 Source cves:...

app-use (>=0.0.1, <=0.0.3), dm-aioaiagent (>=0.4.4, <=0.5.4) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.19)

langchain-openai PYPI version 0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - app-use =0.0.1, =0.4.4, =2.1.21, =1.8.0, =2.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

aa-rag (>=0.4.2, <=0.4.3), antishlop-cli (1.1.1) +5 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.12)

langchain-openai PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aa-rag =0.4.2, =0.0.1, =1.0.1, =1.0.5, =0.1.8, =0.0.22, =0.0.25 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

crewplus (>=0.1.0, <=0.2.30), diagram-to-iac (>=0.8.0, <=1.0.3) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.24)

langchain-openai PYPI version 0.3.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - crewplus =0.1.0, =0.8.0, =0.1.0, =0.0.11, =0.0.61 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

bitefix (>=0.0.1, <=0.0.4), changing-dot (>=0.0.1a1, <=0.0.1a9) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.2.post1)

langchain-openai PYPI version 0.0.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bitefix =0.0.1, =0.0.1a1, =0.1.32, =0.0.1, =0.0.0, =0.0.1, =0.1.0, =0.2.0, =2.0.160, =2.0.171 - vcr-langchain 0.0.31 Sourc...

auxknow (>=0.0.18, <=0.0.20), aworld (>=0.1.0, <=0.2.3) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.9)

langchain-openai PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - auxknow =0.0.18, =0.1.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

diagram-to-iac (>=1.0.10, <=1.4.0) potentially affected by CVE-2026-41488 via langchain-openai (0.3.26)

langchain-openai PYPI version 0.3.26 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - diagram-to-iac =1.0.10, =1.4.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ai-review-assistant (>=0.1.0, <=0.4.0), aita (>=0.1.3, <=0.1.5) +110 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.25)

langchain-openai PYPI version 0.1.25 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-review-assistant =0.1.0, =0.1.3, =0.0.1, =0.1.12, =0.5.0, =0.4.0.dev1, =1.0.4, =0.1.0, =0.0.36, =0.0.5, =0.1.4, =0.1.9 -...

apsbot (>=0.2.0, <=0.3.1), bugbug (>=0.0.546, <=0.0.549) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.8)

langchain-openai PYPI version 0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - apsbot =0.2.0, =0.0.546, =0.0.5, =1.0.0, =0.0.2.7, =0.1.2, =0.0.2, =1.1.0, =0.0.1, =0.1.18, =0.1.58 Source cves: CVE-2026-41488...

sherpa-ai (>=0.3.3, <=0.4.0) potentially affected by CVE-2026-41488 via langchain-openai (0.1.13)

langchain-openai PYPI version 0.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - sherpa-ai =0.3.3, =0.4.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

agentfoundry (1.2.9.1), liteauto (>=0.0.129, <=0.2.25) potentially affected by CVE-2026-41488 via langchain-openai (0.3.4)

langchain-openai PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry 1.2.9.1 - liteauto =0.0.129, =0.2.25 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ai-asset-screener (>=0.1.0, <=0.1.1), bugbug (>=0.0.590, <=0.0.591) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.31)

langchain-openai PYPI version 0.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-asset-screener =0.1.0, =0.0.590, =0.3.0, =0.3.2 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

dziner (0.1.0) potentially affected by CVE-2026-41488 via langchain-openai (0.1.4)

langchain-openai PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - dziner 0.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

edubotics-core (>=0.1.3, <=0.1.7), langchain-pangu (>=0.1.0, <=0.2.3) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.23)

langchain-openai PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - edubotics-core =0.1.3, =0.1.0, =0.2.0rc1, =0.1.6, =1.0.1, =0.1.29, =0.1.49 Source cves: CVE-2026-41488 Source advisory:...

agentlite-llm (0.1.12), codeqai (>=0.0.11, <=0.0.19) +17 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.5)

langchain-openai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentlite-llm 0.1.12 - codeqai =0.0.11, =0.0.1rc1, =0.11.1, =0.2.0, =0.0.3, =0.0.2, =0.3.0, =0.0.4, =0.0.5 - py-chronicler 0.1.0...

codemie-tools (>=0.0.352, <=0.1.14.0), neuroaihub (>=1.0.0, <=1.0.2) +5 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.17)

langchain-openai PYPI version 0.3.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - codemie-tools =0.0.352, =1.0.0, =0.1.2, =0.2.8, =0.1.0, =2.6.13, =2.6.22 Source cves: CVE-2026-41488 Source advisory:...