actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +9 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.28)

langchain-openai PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =1.0.0.dev0, =0.2.10, =1.1.0, =0.1.0, =0.1.4, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-41488...

actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +9 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.28)

langchain-openai PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =1.0.0.dev0, =0.2.10, =1.1.0, =0.1.0, =0.1.4, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-41488...

caption-flow (>=0.1.0, <=0.4.2), commit-bot (>=1.0.1rc1, <=1.1.8) +6 more potentially affected by CVE-2025-58446 via xgrammar (0.1.23)

xgrammar PYPI version 0.1.23 is affected by a known vulnerability. The following packages have a transitive dependency on xgrammar and may be impacted: - caption-flow =0.1.0, =1.0.1rc1, =0.0.4, =1.0.0.dev0, =0.1.1, =0.2.0, =0.9.2.post1, =0.10.0 Source cves: CVE-2025-58446 Source advisory:...