actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.3.72)

langchain-core PYPI version 0.3.72 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =0.1.0, =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

a2a-sdk (0.2.8), a7p (>=1.0.1rc2, <=1.0.2) +247 more potentially affected by CVE-2026-0994 via protobuf (>=6.30.0, <=6.33.4)

protobuf PYPI version =6.30.0, =1.0.1rc2, =0.1.3, =2025.12.2.2, =0.4.0rc1, =1.0.0, =1.0.29, =25.6.0b2, =1.2.0, =0.1.0, =0.2.1b20230930, =0.0.32, =1.3.0.dev4, =1.3.0 and more Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV7...