commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) +2 more potentially affected by CVE-2026-55443 via langchain (0.3.12)

langchain PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.3)

langchain-text-splitters PYPI version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =1.2.12 Source cves: CVE-2026-41481 Source advisory: OSV:GHSA-FV5P-P927-QMXR...

atom-llm (0.1.0), cori-ai (>=0.0.0, <=1.2.12) +5 more potentially affected by CVE-2026-34070 via langchain-core (0.3.28)

langchain-core PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - atom-llm 0.1.0 - cori-ai =0.0.0, =0.7.22, =0.1.3, =0.1.2, =0.1.5 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...