acp-cli (>=0.0.1, <=0.0.804), ads4gpts-langgraph-agent (>=0.1.1, <=0.1.10) +78 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.22)

langchain-anthropic PYPI version 0.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - acp-cli =0.0.1, =0.1.1, =0.0.805, =0.1.3, =0.1.0, =0.1.0a2, =0.1.0, =0.0.38rc83, =0.2.3, =1.3.0, =5.2.161, =5.8.141 and...

langchain-cli (>=0.0.1, <=0.0.2), langchain-sap-llm (0.1.1) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.139)

langchain PYPI version 0.0.139 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - langchain-cli =0.0.1, =0.0.5, =0.0.6 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

alita-sdk (>=0.0.1, <=0.0.16), code-agent (>=0.2.0.0, <=0.3.0.1) +9 more potentially affected by CVE-2026-55443 via langchain (0.1.11)

langchain PYPI version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - alita-sdk =0.0.1, =0.2.0.0, =0.0.10, =0.0.2, =0.0.0, =0.1.0, =0.0.0, =0.10.4, =0.11.1 - wolfcode 0.1.0 Source cves: CVE-2026-55443 Source...

baicai-base (0.1.2), baicai-tutor (0.1.0) +7 more potentially affected by CVE-2026-55443 via langchain (0.3.24)

langchain PYPI version 0.3.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - baicai-base 0.1.2 - baicai-tutor 0.1.0 - cneura-ai =0.1.1, =0.1.12, =0.4.7, =0.1.13, =0.1.0, =1.4.10 - ragbuilder 0.1.6 - spart-prompt 1.0.0...

pdd-cli (>=0.0.18, <=0.0.21), structured-sql-agent (0.1.0) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.8)

langchain-anthropic PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - pdd-cli =0.0.18, =0.0.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

adhoc-api (>=2.1.0, <=2.6.1), archytas (>=1.3.14, <=1.4.5) +6 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.12)

langchain-anthropic PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - adhoc-api =2.1.0, =1.3.14, =1.8.0, =0.10.0, =0.4.7, =1.2.0, =1.4.10 Source cves: CVE-2026-55443 Source advisory:...

bugbug (>=0.0.594, <=0.0.595), testrigor-codecake-cli (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.20)

langchain-anthropic PYPI version 0.3.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - bugbug =0.0.594, =0.1.0, =0.1.2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-54531 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-54531 Source advisory: OSV:GHSA-M2V9-299J-RV96...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-54530 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-54530 Source advisory: OSV:GHSA-52X6-GQ3R-VPF4...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-49461 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-49461 Source advisory: OSV:GHSA-J543-4VMF-QM7V...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-49460 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-49460 Source advisory: OSV:GHSA-5HGR-HG42-57JG...

docvec-cli (0.1.0), ingenious (>=0.1.0, <=0.1.3) +3 more potentially affected by CVE-2026-48735 via pypdf (5.5.0)

pypdf PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - docvec-cli 0.1.0 - ingenious =0.1.0, =0.1.3b1, =0.2.6, =29.1.3, =30.0.4 Source cves: CVE-2026-48735 Source advisory: OSV:GHSA-WJQC-6W8F-H24C...

Command Injection

Overview browserstack-cypress-cli is a BrowserStack Cypress CLI for Cypress integration with BrowserStack's remote devices. Affected versions of this package are vulnerable to Command Injection via the loadJsFile process in readCypressConfigUtil. An attacker can execute arbitrary commands by...

CVE-2026-42089: Inclusion of Functionality from Untrusted Control Sphere

Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmation. In downstream consumers that pass...

CVE-2026-48723 BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36.4 are vulnerable to OS command injection via the cypressconfigfile configuration parameter. In readCypressConfigUtil.js, the loadJsFile function constructs a shell...

com.oneandone:snmpman (>=2.0.0-beta, <=2.2.0), com.oneandone:snmpman-cli (>=2.0.0-beta, <=2.2.0) +4 more potentially affected by CVE-2026-39006 via org.snmp4j:snmp4j-agent (>=3.0.0, <=3.8.2)

org.snmp4j:snmp4j-agent MAVEN version =3.0.0, =2.0.0-beta, =2.0.0-beta, =1.0.03, =0.9.03, =3.0.0, =3.0.0, =4.1.1 Source cves: CVE-2026-39006 Source advisory: OSV:GHSA-7H7J-7VWP-CWFG...

com.oneandone:snmpman (>=1.4.2, <=1.4.3), com.oneandone:snmpman-cli (>=1.4.2, <=1.4.3) potentially affected by CVE-2026-39006 via org.snmp4j:snmp4j-agent (2.6.3)

org.snmp4j:snmp4j-agent MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.snmp4j:snmp4j-agent and may be impacted: - com.oneandone:snmpman =1.4.2, =1.4.2, =1.4.3 Source cves: CVE-2026-39006 Source advisory: OSV:GHSA-7H7J-7VWP-CWFG...

com.oneandone:snmpman (>=1.4.4, <=1.4.8), com.oneandone:snmpman-cli (>=1.4.4, <=1.4.8) potentially affected by CVE-2026-39006 via org.snmp4j:snmp4j-agent (2.7.1)

org.snmp4j:snmp4j-agent MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.snmp4j:snmp4j-agent and may be impacted: - com.oneandone:snmpman =1.4.4, =1.4.4, =1.4.8 Source cves: CVE-2026-39006 Source advisory: OSV:GHSA-7H7J-7VWP-CWFG...

com.oneandone:snmpman (>=1.3.1, <=1.4.1), com.oneandone:snmpman-cli (>=1.4.0, <=1.4.1) potentially affected by CVE-2026-39006 via org.snmp4j:snmp4j-agent (2.6.2)

org.snmp4j:snmp4j-agent MAVEN version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.snmp4j:snmp4j-agent and may be impacted: - com.oneandone:snmpman =1.3.1, =1.4.0, =1.4.1 Source cves: CVE-2026-39006 Source advisory: OSV:GHSA-7H7J-7VWP-CWFG...

kaithem (0.95.0), pantra (>=1.4.10, <=1.5.1) +3 more potentially affected by CVE-2026-54282 via starlette (0.51.0)

starlette PYPI version 0.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - kaithem 0.95.0 - pantra =1.4.10, =0.1.26, =0.2.0, =0.2.2 - telepact-cli 1.0.0a177 Source cves: CVE-2026-54282 Source advisory:...