CVE-2026-41481 LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

CVE-2026-41481

LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because...

langchain-text-splitters code issue vulnerability

langchain-text-splitters is a Python package open-sourced by LangChain. Versions of langchain-text-splitters prior to 1.1.2 had code vulnerabilities. These vulnerabilities stemmed from the use of the splittextfromurl method in HTMLHeaderTextSplitter, which initiated a redirection after verifying...

GHSA-FV5P-P927-QMXR LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Summary HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because redirect targets were not revalidated, a URL pointing to an attacker-controlled server could redirect to...

EUVD-2025-209296

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3...

CVE-2025-14816

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3...

CVE-2025-14816 Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3...

CVE-2025-14816 Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64

Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3...

CVE-2025-14816

The connected PT-2026-30802 advisory confirms CVE-2025-14816 as a local vulnerability affecting Mitsubishi Electric GENESIS64, ICONICS Suite/MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64 (and related Iconics Digital Solutions variants). The root cause is cleartext storage/display ...

EUVD-2018-21680

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

CVE-2018-25211 Allok Video Splitter 3.1.1217 Buffer Overflow via License Name

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

CVE-2018-25211

The vulnerability affects Allok Video Splitter 3.1.1217 in the License Name field handling. A buffer overflow is triggered by an oversized input, with crafted payloads exceeding 780 bytes, leading to local denial of service or arbitrary code execution when the Register button is clicked. The issu...

CVE-2018-25211

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

PT-2026-28248

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

Allok Video Splitter buffer error vulnerability

Allok Video Splitter is a video splitting and editing tool developed by Allok Corporation. Version 3.1.1217 of Allok Video Splitter contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the License Name field, which may lead to denial of service or the...

CVE-2018-25211: Out-of-bounds Write

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the...

Quantum CDMA-Based Continuous Variable Quantum Key Distribution Using Chaotic Phase Shifters

We present a quantum code-division multiple-access q-CDMA framework for multiuser continuous-variable quantum key distribution CV-QKD over a shared quantum channel. The proposed architecture employs chaotic phase shifters to encode and decode quantum states, enabling efficient multiplexing and...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-29780 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-29780 Source advisory: OSV:PYSEC-2026-2148...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-29780 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-29780 Source advisory: MEND:CVE-2026-29780...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-29780 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-29780 Source advisory: OSV:GHSA-389R-RCCM-H3H5...