ai-security-analyzer (>=0.0.45, <=0.0.55), browser-use (>=0.2.6, <=0.3.2) +3 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.15)

langchain-anthropic PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - ai-security-analyzer =0.0.45, =0.2.6, =0.8.0, =0.4.1, =0.5.4 - re-browser-use 0.3.2 Source cves: CVE-2026-55443 Source...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31241 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31241 Source advisory: OSV:PYSEC-2026-2634...

actbench (0.0.1a5), browser-use (>=0.1.42, <=0.2.5) +4 more potentially affected by CVE-2026-31245 via mem0ai (0.1.93)

mem0ai PYPI version 0.1.93 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - actbench 0.0.1a5 - browser-use =0.1.42, =0.1.13, =0.1.7, =0.1.3, =0.1.48, =0.2.2 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31240 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31245 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-7597 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

browser-use (>=0.2.6, <=0.3.2), re-browser-use (0.3.2) potentially affected by CVE-2026-26013 via langchain-core (0.3.64)

langchain-core PYPI version 0.3.64 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use =0.2.6, =0.3.2 - re-browser-use 0.3.2 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

ambientagi (>=0.1.1, <=0.2.12), kolega-code (>=0.1.0, <=0.3.0) +7 more potentially affected by CVE-2025-47241 via browser-use (>=0.1.19, <=0.1.41)

browser-use PYPI version =0.1.19, =0.1.1, =0.1.0, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.13.0, =0.14.1 Source cves: CVE-2025-47241 Source advisory: OSV:PYSEC-2026-300...

Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL

Summary During a manual source code review, ARIMLABS.AI researchers identified that the browseruse module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can...

DEBIAN-CVE-2026-12464

Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

ai-security-analyzer (>=0.0.45, <=0.0.55), browser-use (>=0.2.6, <=0.3.2) +3 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.15)

langchain-anthropic PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - ai-security-analyzer =0.0.45, =0.2.6, =0.8.0, =0.4.1, =0.5.4 - re-browser-use 0.3.2 Source cves: CVE-2026-55443 Source...

actbench (0.0.1a5), browser-use (>=0.1.42, <=0.2.5) +4 more potentially affected by CVE-2026-31245 via mem0ai (0.1.93)

mem0ai PYPI version 0.1.93 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - actbench 0.0.1a5 - browser-use =0.1.42, =0.1.13, =0.1.7, =0.1.3, =0.1.48, =0.2.2 Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31245 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7VF...

actbench (0.0.1a5), browser-use (>=0.1.42, <=0.2.5) +4 more potentially affected by CVE-2026-31240 via mem0ai (0.1.93)

mem0ai PYPI version 0.1.93 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - actbench 0.0.1a5 - browser-use =0.1.42, =0.1.13, =0.1.7, =0.1.3, =0.1.48, =0.2.2 Source cves: CVE-2026-31240 Source advisory: OSV:GHSA-JFV9-68M5-GJ...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31240 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31240 Source advisory: OSV:GHSA-JFV9-68M5-GJJR...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-31241 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-31241 Source advisory: OSV:GHSA-GQ6F-QWV9-RF4J...

browser-use (0.1.41), mcp-server-browser-use (>=0.1.7, <=0.1.9) +1 more potentially affected by CVE-2026-7597 via mem0ai (0.1.88)

mem0ai PYPI version 0.1.88 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - browser-use 0.1.41 - mcp-server-browser-use =0.1.7, =0.1.43, =0.1.44 Source cves: CVE-2026-7597 Source advisory: OSV:GHSA-XQXW-R767-67M7...

browser-use (>=0.2.6, <=0.3.2), langchain-search-django (>=0.1.0, <=0.7.0) +1 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.21)

langchain-openai PYPI version 0.3.21 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - browser-use =0.2.6, =0.1.0, =0.7.0 - re-browser-use 0.3.2 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

avalagent (1.0.0), browser-use-undetected (>=0.2.5, <=0.2.5.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.23)

langchain-openai PYPI version 0.3.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - avalagent 1.0.0 - browser-use-undetected =0.2.5, =0.2.10, =0.0.7, =3.2.1, =3.2.5 Source cves: CVE-2026-41488 Source advisory:...

avalagent (1.0.0), browser-use-undetected (>=0.2.5, <=0.2.5.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.23)

langchain-openai PYPI version 0.3.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - avalagent 1.0.0 - browser-use-undetected =0.2.5, =0.2.10, =0.0.7, =3.2.1, =3.2.5 Source cves: CVE-2026-41488 Source advisory:...