8 matches found
iflow-mcp-prospectio-api-mcp (0.1.0) potentially affected by CVE-2026-26013 via langchain-core (0.3.70)
langchain-core PYPI version 0.3.70 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - iflow-mcp-prospectio-api-mcp 0.1.0 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...
actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +9 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.28)
langchain-openai PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =1.0.0.dev0, =0.2.10, =1.1.0, =0.1.0, =0.1.4, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-41488...
actscene-ocr (>=0.1.3, <=0.1.5), biomni-bridge (>=0.3.1, <=0.3.3) +9 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.28)
langchain-openai PYPI version 0.3.28 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - actscene-ocr =0.1.3, =0.3.1, =1.0.0.dev0, =0.2.10, =1.1.0, =0.1.0, =0.1.4, =0.1.0.dev20, =0.2.1rc1 Source cves: CVE-2026-41488...
iflow-mcp-prospectio-api-mcp (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.70)
langchain-core PYPI version 0.3.70 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - iflow-mcp-prospectio-api-mcp 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
iflow-mcp-prospectio-api-mcp (0.1.0) potentially affected by CVE-2026-34070 via langchain-core (0.3.70)
langchain-core PYPI version 0.3.70 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - iflow-mcp-prospectio-api-mcp 0.1.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)
langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...
asap-cli (>=0.0.3, <=0.0.4.4), iflow-mcp-prospectio-api-mcp (0.1.0) +2 more potentially affected by CVE-2026-28277 via langgraph (0.6.4)
langgraph PYPI version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - asap-cli =0.0.3, =0.2.18, =0.2.21 - structured-sql-agent 0.1.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...
iflow-mcp-prospectio-api-mcp (0.1.0) potentially affected by CVE-2026-26013 via langchain-core (0.3.70)
langchain-core PYPI version 0.3.70 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - iflow-mcp-prospectio-api-mcp 0.1.0 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...