commit-crafter-ai (>=1.0.1, <=1.0.3) potentially affected by CVE-2026-26013 via langchain-core (0.3.25)

langchain-core PYPI version 0.3.25 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - commit-crafter-ai =1.0.1, =1.0.3 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...