bugbug (0.0.593), chatlas-chains (>=0.1.3, <=0.3.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.32)

langchain-openai PYPI version 0.3.32 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.593 - chatlas-chains =0.1.3, =1.0.0, =0.1.8, =0.0.86, =0.0.92 Source cves: CVE-2026-41488 Source advisory:...

bugbug (0.0.593), chatlas-chains (>=0.1.3, <=0.3.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.32)

langchain-openai PYPI version 0.3.32 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - bugbug 0.0.593 - chatlas-chains =0.1.3, =1.0.0, =0.1.8, =0.0.86, =0.0.92 Source cves: CVE-2026-41488 Source advisory:...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-34500 Source advisory: OSV:GHSA-24J9-X2WG-9QV6...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-29145 Source advisory: OSV:GHSA-95JQ-RWVF-VJX4...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-34500 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989819...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, crossplane, snyk-cli, grafana-alloy, kots, pulumi-language-dotnet, src-fingerprint-fips, commercial-chainloop-cli, osv-scanner, kubevela-fips, chezmoi, pulumi-kubernetes-operator, witness, jfrog-cli, kubescape, melange, external-secrets-operator-fips...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator, grafana-alloy, argo-workflows, kubevela, tfsec, kyverno, flux, pulumi, kaniko, bom, teleport, witness, src-fingerprint, gitlab-runner, osv-scanner, skaffold, chezmoi, argo-events, zot, kubescape, steampipe, syft, kots, cerbos, k9s, rancher-flee...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator, grafana-alloy, argo-workflows, kubevela, tfsec, kyverno, flux, pulumi, kaniko, bom, teleport, witness, src-fingerprint, gitlab-runner, osv-scanner, skaffold, chezmoi, argo-events, zot, kubescape, steampipe, syft, kots, cerbos, k9s, rancher-flee...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator, grafana-alloy, argo-workflows, kubevela, tfsec, kyverno, flux, pulumi, kaniko, bom, teleport, witness, src-fingerprint, gitlab-runner, osv-scanner, skaffold, chezmoi, argo-events, zot, kubescape, steampipe, syft, kots, cerbos, k9s, rancher-flee...

terminal-buddy (>=0.1.1, <=0.1.2), ws-bom-robot-app (>=0.0.86, <=0.0.88) potentially affected by CVE-2026-34070 via langchain-core (0.3.75)

langchain-core PYPI version 0.3.75 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - terminal-buddy =0.1.1, =0.0.86, =0.0.88 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

terminal-buddy (>=0.1.1, <=0.1.2), ws-bom-robot-app (>=0.0.86, <=0.0.88) potentially affected by CVE-2026-34070 via langchain-core (0.3.75)

langchain-core PYPI version 0.3.75 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - terminal-buddy =0.1.1, =0.0.86, =0.0.88 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

terminal-buddy (>=0.1.1, <=0.1.2), ws-bom-robot-app (>=0.0.86, <=0.0.88) potentially affected by CVE-2026-26013 via langchain-core (0.3.75)

langchain-core PYPI version 0.3.75 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - terminal-buddy =0.1.1, =0.0.86, =0.0.88 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: coredns, kube-logging-operator-custom-runner, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, pdfcpu, yq, cri-tools, nats, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, op-geth, metrics-agent, go-licenses, gh,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: coredns, kube-logging-operator-custom-runner, crossplane-provider-aws-kinesis, argo-workflows, rootlesskit, pdfcpu, cri-tools, nats, clickhouse-operator, http-echo, secrets-store-csi-driver-provider-azure, op-geth, metrics-agent, go-licenses, gh,...

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

CVE-2025-27379 Stored Cross-Site Scripting in AES BOM Viewer

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...

CVE-2025-27379

A stored cross-site scripting XSS vulnerability in the BOM Viewer in Altium AES 7.0.3 allows an authenticated attacker to inject arbitrary JavaScript into the Description field of a schematic, which is executed when the BOM Viewer renders the affected content...