kadia (>=1.0.0, <=1.0.10), langchain (>=0.0.339rc3, <=0.0.341) potentially affected by CVE-2026-26013 via langchain-core (0.0.6)

langchain-core PYPI version 0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - kadia =1.0.0, =0.0.339rc3, =0.0.341 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

aiagents4pharma (>=1.0.0, <=1.6.0), langchain-anchorbrowser (0.1.0a3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.3.15)

langchain-core PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aiagents4pharma =1.0.0, =0.1.0, =0.1.1, =0.1.3 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

mimir-ai (0.0.3), ragaeval (>=0.1.6, <=0.1.8) potentially affected by CVE-2026-26013 via langchain-core (0.2.40)

langchain-core PYPI version 0.2.40 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - mimir-ai 0.0.3 - ragaeval =0.1.6, =0.1.8 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

elevendoc (>=0.1.3, <=1.2.4), llm-adaptive-router (>=0.1.0, <=0.1.12) potentially affected by CVE-2026-26013 via langchain-core (0.3.8)

langchain-core PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - elevendoc =0.1.3, =0.1.0, =0.1.12 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

kweaver-data-retrieval (>=0.1.2, <=0.3.1) potentially affected by CVE-2026-26013 via langchain-core (0.2.3)

langchain-core PYPI version 0.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - kweaver-data-retrieval =0.1.2, =0.3.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

browser-use-recorder (0.1.41), iatoolkit (>=0.3.1, <=1.59.0) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.3.35)

langchain-core PYPI version 0.3.35 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use-recorder 0.1.41 - iatoolkit =0.3.1, =0.1.0, =25.3.4.1, =1.1.40, =1.1.41 Source cves: CVE-2026-26013 Source advisory:...

glaider-fuzzer (0.0.6), prompt-security-fuzzer (>=0.1.2, <=2.0.0) potentially affected by CVE-2026-26013 via langchain-core (0.1.4)

langchain-core PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - glaider-fuzzer 0.0.6 - prompt-security-fuzzer =0.1.2, =2.0.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

actbench (0.0.1a5), blastai (>=0.1.2, <=0.1.6) +9 more potentially affected by CVE-2026-26013 via langchain-core (0.3.49)

langchain-core PYPI version 0.3.49 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - actbench 0.0.1a5 - blastai =0.1.2, =0.1.41, =0.1.13, =0.1.7, =3.0.0, =0.1.3, =0.1.7, =0.1.48, =0.1.43, =0.1.44 Source cves:...

ragstack-ai (0.2.0) potentially affected by CVE-2026-26013 via langchain-core (0.0.8)

langchain-core PYPI version 0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ragstack-ai 0.2.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

process-gpt-llm-factory (1.0.1) potentially affected by CVE-2026-26013 via langchain-core (0.3.2)

langchain-core PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - process-gpt-llm-factory 1.0.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

leonbonetti-fast-mcp (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-26013 via langchain-core (0.3.47)

langchain-core PYPI version 0.3.47 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - leonbonetti-fast-mcp =0.1.0, =0.1.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

anomaly-agent (>=0.1.0, <=0.2.0), lcrai (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.34)

langchain-core PYPI version 0.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - anomaly-agent =0.1.0, =0.1.1, =0.2.1, =0.4.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

pdd-cli (>=0.0.28, <=0.0.94) potentially affected by CVE-2026-26013 via langchain-core (0.3.56)

langchain-core PYPI version 0.3.56 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - pdd-cli =0.0.28, =0.0.94 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

langchain-community (0.2.14), langchain-ollama (0.1.2) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.36)

langchain-core PYPI version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - langchain-community 0.2.14 - langchain-ollama 0.1.2 - repo2vec =0.1.6, =0.1.8 Source cves: CVE-2026-26013 Source advisory:...

aiagentgraph (>=0.0.1, <=0.0.4a1), edubotics-core (>=0.1.3, <=0.1.7) +4 more potentially affected by CVE-2026-26013 via langchain-core (0.2.38)

langchain-core PYPI version 0.2.38 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aiagentgraph =0.0.1, =0.1.3, =0.0.1, =1.0.1, =3.0.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

swarms (>=4.6.2, <=4.8.2) potentially affected by CVE-2026-26013 via langchain-core (0.1.33)

langchain-core PYPI version 0.1.33 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - swarms =4.6.2, =4.8.2 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

agentuniverse (>=0.0.6.dev1, <=0.0.7), bunkoer (0.0.3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.1.3)

langchain-core PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - agentuniverse =0.0.6.dev1, =1.8.1, =1.8.1, =0.1.115, =0.1.743 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

denser-retriever (>=0.1.1, <=0.1.3), eknowledge (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.10)

langchain-core PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - denser-retriever =0.1.1, =0.1.3, =0.1.0, =2026.1.201651 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

dsrag (>=0.1.0, <=0.3.8), jpl-rosa (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-26013 via langchain-core (0.2.12)

langchain-core PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - dsrag =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

baicai-base (0.1.2), baicai-tutor (0.1.0) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.57)

langchain-core PYPI version 0.3.57 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 - cneura-ai =0.1.1, =0.1.122 Source cves: CVE-2026-26013 Source advisory:...