ZROK security vulnerabilities

Zrok is a secure internet sharing tool developed by OpenZiti. Versions of Zrok prior to 2.0.1 contained security vulnerabilities. These vulnerabilities stemmed from the use of the text/template template engine without proper escaping of the refreshInterval parameter, which could lead to cross-sit...

PT-2026-33504

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 23.0.0 Description Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. An authenticated administrator can achieve remote code execution as the web server user by...

Anviz CrossChex Standard security vulnerabilities

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability arises from the ability of attackers to manipulate the...

[SECURITY] Fedora 44 Update: spacebar-6.6.4-1.fc44

Spacebar is a telepathy-qt based SMS application that primarily targets Plasm a Mobile...

[SECURITY] Fedora 44 Update: kf6-ktextwidgets-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 addon with advanced text edting widgets...

[SECURITY] Fedora 44 Update: kf6-kcoreaddons-6.25.0-1.fc44

KCoreAddons provides classes built on top of QtCore to perform various tasks such as manipulating mime types, autosaving files, creating backup files, generating random sequences, performing text manipulations such as macro replacement, accessing user information and many more...

Server-side Request Forgery (SSRF)

Overview langchain-text-splitters is a LangChain text splitting utilities Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the splittextfromurl function. An attacker can access internal network resources and potentially exfiltrate sensitive data by supplying...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: SNYK:PYTHON-LANGCHAINTEXTSPLITTERS-16095053...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +24 more potentially affected by CVE-2026-41481 via langchain-text-splitters (>=1.0.0a1, <=1.1.1)

langchain-text-splitters PYPI version =1.0.0a1, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.1.0, =0.1.0, =0.4.0, =0.0.4, =0.8.0, =0.8.15 and more Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...

abs-langchain-suite (>=0.1.0, <=0.3.1), acp-cli (>=0.0.1, <=0.0.804) +729 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.11)

langchain-text-splitters PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - abs-langchain-suite =0.1.0, =0.0.1, =0.0.1a1, =0.1.0, =1.0.0rc1, =3.2.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0,...

a2a-client-handler (0.1.0), aa-rag (>=0.4.2, <=0.4.3) +105 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.8)

langchain-text-splitters PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - a2a-client-handler 0.1.0 - aa-rag =0.4.2, =0.1.3, =0.5.18, =0.1.3, =0.0.45, =0.1.1, =0.0.1, =0.0.1, =0.0.4 -...

actbench (0.0.1a5), agentic-kit-eda (0.0.2) +15 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.7)

langchain-text-splitters PYPI version 0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - actbench 0.0.1a5 - agentic-kit-eda 0.0.2 - agentic-kit-flow 0.0.1 - blastai =0.1.2, =0.1.41, =0.2.0, =0.3.0,...

aa-rag (>=0.1.0, <=0.4.1), aiagents4pharma (>=1.8.2, <=1.22.3) +10 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.5)

langchain-text-splitters PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - aa-rag =0.1.0, =1.8.2, =1.0.0, =0.0.3, =0.0.2, =25.7.1.0, =0.3.0, =0.7.0, =0.1.1, =0.6.51, =0.0.30, =0.0.33 Sour...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.3)

langchain-text-splitters PYPI version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =1.2.12 Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...

autonomous-agent (0.0.1), creao (>=0.2.11, <=0.2.25) +23 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.2)

langchain-text-splitters PYPI version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - autonomous-agent 0.0.1 - creao =0.2.11, =0.1.1, =0.1.0, =0.1.3, =0.1.3, =1.0.0, =0.0.90, =0.1.5, =1.2.0, =0.1.1,...

LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Summary HTMLHeaderTextSplitter.splittextfromurl validated the initial URL using validatesafeurl but then performed the fetch with requests.get with redirects enabled the default. Because redirect targets were not revalidated, a URL pointing to an attacker-controlled server could redirect to...

actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +6 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.9)

langchain-text-splitters PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =0.1.0, =1.0.25122300, =1.0.0, =0.1.0, =0.1.1 - structured-sql-agent 0.1.0 Source...

agentiacap (>=0.1.31, <=0.1.37), ai-parrot (>=0.5.0, <=0.5.17) +14 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.6)

langchain-text-splitters PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - agentiacap =0.1.31, =0.5.0, =0.0.0, =0.3.1, =1.0.0, =1.1.2, =0.1.0, =0.1.0, =0.0.18, =0.2.1, =0.4.1 -...

anoteai (0.11.0), assistant (>=1.0.0b1, <=1.2.1b1) +16 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.2.1)

langchain-text-splitters PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - anoteai 0.11.0 - assistant =1.0.0b1, =0.1.33, =0.0.5, =1.0.0, =0.1.3, =1.1.0rc1, =0.0.1, =0.1.2, =0.0.1, =0.6.0a...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...