ambientagi (>=0.1.1, <=0.2.12), browser-use (>=0.1.38, <=0.1.40) +14 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.1)

langchain-openai PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ambientagi =0.1.1, =0.1.38, =0.1.3, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.1.0, =1.1.40, =0.13.0, =0.14.1 -...

arklex (>=0.0.1, <=0.0.4), gptparse (>=0.1.1, <=0.2.0) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.3)

langchain-openai PYPI version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - arklex =0.0.1, =0.1.1, =1.2.1, =0.0.2, =0.1.0, =0.6.0, =0.4.49, =0.4.47, =0.5.38, =0.5.67 Source cves: CVE-2026-41488 Source...

admin-api-lib (>=3.2.0, <=3.4.0), ai-code-review-cli (>=2.3.0, <=2.7.3) +18 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.34)

langchain-openai PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - admin-api-lib =3.2.0, =2.3.0, =1.1.0b4, =2.0.0.dev6, =1.1.0b3, =1.1.0b1, =0.2.0, =0.0.20, =1.0.0, =0.0.1, =2.1.0, =0.1.0a3,...

auxknow (>=0.0.18, <=0.0.20), aworld (>=0.1.0, <=0.2.3) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.9)

langchain-openai PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - auxknow =0.0.18, =0.1.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

aisploit (>=0.0.1, <=0.0.7), aita (>=0.1.0, <=0.1.2) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.7)

langchain-openai PYPI version 0.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aisploit =0.0.1, =0.1.0, =1.0.9, =0.0.1, =0.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

terminaider (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-41488 via langchain-openai (0.2.6)

langchain-openai PYPI version 0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - terminaider =0.1.1, =0.1.3 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

bitefix (>=0.0.1, <=0.0.4), changing-dot (>=0.0.1a1, <=0.0.1a9) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.0.2.post1)

langchain-openai PYPI version 0.0.2.post1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bitefix =0.0.1, =0.0.1a1, =0.1.32, =0.0.1, =0.0.0, =0.0.1, =0.1.0, =0.2.0, =2.0.160, =2.0.171 - vcr-langchain 0.0.31 Sourc...

beehive-ai (>=0.0.1, <=0.0.2), documentgraph (0.1.2) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.1)

langchain-openai PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beehive-ai =0.0.1, =0.0.3, =0.1.0, =0.0.3, =0.0.10 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

bisheng-langchain (>=0.3.0b0, <=0.3.4.dev3) potentially affected by CVE-2026-41488 via langchain-openai (0.1.0)

langchain-openai PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bisheng-langchain =0.3.0b0, =0.3.4.dev3 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +160 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

baicai-base (0.1.2), baicai-tutor (0.1.0) potentially affected by CVE-2026-41488 via langchain-openai (0.3.15)

langchain-openai PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

jpl-rosa (>=1.0.3, <=1.0.4), longtrainer (>=0.2.2, <=0.3.0) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.21)

langchain-openai PYPI version 0.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - jpl-rosa =1.0.3, =0.2.2, =0.1.5, =1.0.0, =0.1.0, =0.1.3 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

beatrica (>=0.0.3, <=2025.5.71632), zetaforge (0.1.2) potentially affected by CVE-2026-41488 via langchain-openai (0.1.2)

langchain-openai PYPI version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - beatrica =0.0.3, =2025.5.71632 - zetaforge 0.1.2 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +160 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

Server-side Request Forgery (SSRF)

Overview langchain-openai is an An integration package connecting OpenAI and LangChain Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the image token counting urltosize function. An attacker can access internal network resources by exploiting a DNS...

aiagentgraph (>=0.0.1, <=0.0.4a1), aicat-annotator (0.0.1) +41 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.7)

langchain-openai PYPI version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagentgraph =0.0.1, =0.8.29, =0.1.0, =1.0.0, =0.0.5, =0.5.0, =0.5.0, =0.5.0, =0.1.1, =2.0.0, =2.0.5 and more Source cves:...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.12)

langchain-openai PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =0.1.0, =0.5.68, =0.6.39 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

aa-rag (>=0.1.0, <=0.4.1), ads4gpts-langchain (>=0.1.0, <=0.1.3) +120 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.14)

langchain-openai PYPI version 0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aa-rag =0.1.0, =0.1.0, =0.8.0, =0.0.45, =0.1.0, =1.1.0a20250429, =0.1.0, =0.0.20rc7, =0.2.0, =0.2.0, =0.5.0 and more Source cve...

cascade-node-sdk (0.1.0) potentially affected by CVE-2026-41488 via langchain-openai (0.0.4)

langchain-openai PYPI version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - cascade-node-sdk 0.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

edubotics-core (>=0.1.3, <=0.1.7), langchain-pangu (>=0.1.0, <=0.2.3) +6 more potentially affected by CVE-2026-41488 via langchain-openai (0.1.23)

langchain-openai PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - edubotics-core =0.1.3, =0.1.0, =0.2.0rc1, =0.1.6, =1.0.1, =0.1.29, =0.1.49 Source cves: CVE-2026-41488 Source advisory:...