agential (>=0.0.4, <=0.2.1), ai-review-assistant (>=0.1.0, <=0.4.0) +225 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.4)

langchain-text-splitters PYPI version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - agential =0.0.4, =0.1.0, =0.1.0, =0.0.1, =0.1.3, =0.2.0, =0.0.1, =0.1.4, =0.4.13, =0.9.1 and more Source cves:...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: GHSA-FV5P-P927-QMXR...

GHSA-FV5P-P927-QMXR LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Summary HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because redirect targets were not revalidated, a URL pointing to an attacker-controlled server could redirect to...

ano-code (>=0.1.6, <=0.1.11), khoj (>=1.41.1.dev34, <=2.0.0b16.dev0) +1 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.1)

langchain-text-splitters PYPI version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - ano-code =0.1.6, =1.41.1.dev34, =1.21.0, =1.21.1 Source cves: CVE-2026-41481 Source advisory:...

actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +6 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.9)

langchain-text-splitters PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =0.1.0, =1.0.25122300, =1.0.0, =0.1.0, =0.1.1 - structured-sql-agent 0.1.0 Source...

addepar-redflag (>=0.1.0, <=1.2.0), agentbruno (>=0.0.2, <=0.0.5) +181 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.0.2)

langchain-text-splitters PYPI version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - addepar-redflag =0.1.0, =0.0.2, =0.1.0, =0.0.8.dev1, =0.0.1, =0.19.0, =0.1.0, =0.1.0, =0.8.29, =0.0.1, =0.0.1,...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

agentiacap (>=0.1.31, <=0.1.37), ai-parrot (>=0.5.0, <=0.5.17) +14 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.6)

langchain-text-splitters PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - agentiacap =0.1.31, =0.5.0, =0.0.0, =0.3.1, =1.0.0, =1.1.2, =0.1.0, =0.1.0, =0.0.18, =0.2.1, =0.4.1 -...

academic-metrics (>=0.1.0b0, <=1.0.99), aiagents4pharma (>=1.0.0, <=1.6.0) +19 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.2)

langchain-text-splitters PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - academic-metrics =0.1.0b0, =1.0.0, =0.1.8, =0.1.2, =0.1.1, =0.1.0, =0.3.1, =0.1.0, =25.3.4.1, =2.11.0, =2.14.1 a...

a2a-client-handler (0.1.0), aa-rag (>=0.4.2, <=0.4.3) +105 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.8)

langchain-text-splitters PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - a2a-client-handler 0.1.0 - aa-rag =0.4.2, =0.1.3, =0.5.18, =0.1.3, =0.0.45, =0.1.1, =0.0.1, =0.0.1, =0.0.4 -...

abs-langchain-suite (>=0.1.0, <=0.3.1), acp-cli (>=0.0.1, <=0.0.804) +729 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.11)

langchain-text-splitters PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - abs-langchain-suite =0.1.0, =0.0.1, =0.0.1a1, =0.1.0, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0,...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: SNYK:PYTHON-LANGCHAINTEXTSPLITTERS-16095053...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...

autonomous-agent (0.0.1), creao (>=0.2.11, <=0.2.25) +23 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.2)

langchain-text-splitters PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - autonomous-agent 0.0.1 - creao =0.2.11, =0.1.1, =0.1.0, =0.1.3, =0.1.3, =1.0.0, =0.0.90, =0.1.5, =1.2.0, =0.1.1,...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-41314 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-41314 Source advisory: OSV:GHSA-X284-J5P8-9C5P...

centricube-langchain (>=1.2.3, <=1.3.0), centricube-pyautogen (>=0.3.2, <=0.3.3) +5 more potentially affected by CVE-2026-41312 via pypdf (5.6.1)

pypdf PYPI version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - centricube-langchain =1.2.3, =0.3.2, =0.3.0, =0.1.0, =0.0.11, =0.0.3, =0.0.5 Source cves: CVE-2026-41312 Source advisory: OSV:GHSA-7GW9-CF7V-778F...

PT-2026-35320

Summary langchain-openai's url to size helper used by get num tokens from messages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled...

PT-2026-35311

Summary HTMLHeaderTextSplitter.split text from url validated the initial URL using validate safe url but then performed the fetch with requests.get with redirects enabled the default. Because redirect targets were not revalidated, a URL pointing to an attacker-controlled server could redirect to...

CVE-2026-30617

LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling. A remote attacker can access the publicly exposed MCP management interface and configure an MCP STDIO server with attacker-controlled commands and arguments. When...

Arbitrary Code Injection

Overview langchain-chatchat is a Langchain-Chatchat formerly langchain-ChatGLM, local knowledge based LLM like ChatGLM, Qwen and Llama RAG and Agent app with langchain Affected versions of this package are vulnerable to Arbitrary Code Injection via the MCP STDIO server configuration and execution...