auxknow (>=0.0.18, <=0.0.20), aworld (>=0.1.0, <=0.2.3) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.9)

langchain-openai PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - auxknow =0.0.18, =0.1.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

a2a-client-handler (0.1.0), actbench (0.0.1a5) +10 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.11)

langchain-openai PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - a2a-client-handler 0.1.0 - actbench 0.0.1a5 - blastai =0.1.2, =0.1.41, =0.1.13, =0.1.7, =0.1.3, =0.1.7, =0.1.48, =0.1.0, =0.1.4...

agentfoundry (>=1.3.9, <=1.3.10), markitdown-pro (>=1.0.0, <=2.2.0) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.29)

langchain-openai PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentfoundry =1.3.9, =1.0.0, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-41488 Source advisory:...

joe2025-uv-project (>=0.1.0, <=0.3.0), meez (0.2.22) potentially affected by CVE-2026-41488 via langchain-openai (0.3.30)

langchain-openai PYPI version 0.3.30 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - joe2025-uv-project =0.1.0, =0.3.0 - meez 0.2.22 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

ai-asset-screener (>=0.1.0, <=0.1.1), bugbug (>=0.0.590, <=0.0.591) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.31)

langchain-openai PYPI version 0.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-asset-screener =0.1.0, =0.0.590, =0.3.0, =0.3.2 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

bugbug (0.0.593), chatlas-chains (>=0.1.3, <=0.3.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.32)

langchain-openai PYPI version 0.3.32 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.593 - chatlas-chains =0.1.3, =1.0.0, =0.1.8, =0.0.86, =0.0.92 Source cves: CVE-2026-41488 Source advisory:...

agent-api-server (>=2.1.7, <=2.1.13), agentc-langchain (1.0.0) +8 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.33)

langchain-openai PYPI version 0.3.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agent-api-server =2.1.7, =0.0.594, =1.0.0rc1, =0.1.0, =0.0.93, =0.1.3, =0.1.4 Source cves: CVE-2026-41488 Source advisory:...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +160 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

admin-api-lib (>=3.2.0, <=3.4.0), ai-code-review-cli (>=2.3.0, <=2.7.3) +18 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.34)

langchain-openai PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - admin-api-lib =3.2.0, =2.3.0, =1.1.0b4, =2.0.0.dev6, =1.1.0b3, =1.1.0b1, =0.2.0, =0.0.20, =1.0.0, =0.0.1, =2.1.0, =0.1.0a3,...

abs-langchain-suite (>=0.1.0, <=0.3.1), acp-cli (>=0.0.1, <=0.0.804) +295 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.35)

langchain-openai PYPI version 0.3.35 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - abs-langchain-suite =0.1.0, =0.0.1, =0.0.1a1, =1.0.0rc1, =0.1.1, =0.0.1a0, =0.1.1, =0.0.3rc0, =0.0.805, =0.1.2, =0.0.1, =0.1.0...

platform-gen-ai (>=0.1.0, <=0.1.1), ragstack-ai-langchain (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-41488 via langchain-openai (0.1.3)

langchain-openai PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - platform-gen-ai =0.1.0, =1.0.0, =1.0.7 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

app-use (>=0.0.1, <=0.0.3), dm-aioaiagent (>=0.4.4, <=0.5.4) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.19)

langchain-openai PYPI version 0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - app-use =0.0.1, =0.4.4, =2.1.21, =1.8.0, =2.1.0 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

Server-side Request Forgery (SSRF)

Overview langchain-text-splitters is a LangChain text splitting utilities Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the splittextfromurl function. An attacker can access internal network resources and potentially exfiltrate sensitive data by supplying...

addepar-redflag (>=0.1.0, <=1.2.0), agentbruno (>=0.0.2, <=0.0.5) +181 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.0.2)

langchain-text-splitters PYPI version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - addepar-redflag =0.1.0, =0.0.2, =0.1.0, =0.0.8.dev1, =0.0.1, =0.19.0, =0.1.0, =0.1.0, =0.8.29, =0.0.1, =0.0.1,...

agential (>=0.0.4, <=0.2.1), ai-review-assistant (>=0.1.0, <=0.4.0) +225 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.4)

langchain-text-splitters PYPI version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - agential =0.0.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3, =0.2.0, =0.0.1, =0.1.4, =0.4.13, =0.9.1 and more Source cves:...

act-workflow (>=4.8.2, <=4.8.399), agent-builder (0.0.1) +21 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.0)

langchain-text-splitters PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - act-workflow =4.8.2, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.0.4, =0.0.3, =0.1.0, =0.1.0, =0.1.12 and more...

ano-code (>=0.1.6, <=0.1.11), khoj (>=1.41.1.dev34, <=2.0.0b16.dev0) +1 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.1)

langchain-text-splitters PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - ano-code =0.1.6, =1.41.1.dev34, =1.21.0, =1.21.1 Source cves: CVE-2026-41481 Source advisory:...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.3)

langchain-text-splitters PYPI version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =1.2.12 Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...

aa-rag (>=0.1.0, <=0.4.1), aiagents4pharma (>=1.8.2, <=1.22.3) +10 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.5)

langchain-text-splitters PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - aa-rag =0.1.0, =1.8.2, =1.0.0, =0.0.3, =0.0.2, =25.7.1.0, =0.3.0, =0.7.0, =0.1.1, =0.6.51, =0.0.30, =0.0.33 Sour...

actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +6 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.9)

langchain-text-splitters PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =0.1.0, =1.0.25122300, =1.0.0, =0.1.0, =0.1.1 - structured-sql-agent 0.1.0 Source...