langchain-timbr (>=2.1.0, <=3.3.0), otat (>=0.1.0, <=0.1.3) +5 more potentially affected by CVE-2026-9856 via transformers (4.57.0)

transformers PYPI version 4.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - langchain-timbr =2.1.0, =0.1.0, =1.0.1, =0.5.3rc2, =1.1.4, =0.0.1, =0.1.3 - vllm-kunlun 0.11.1 Source cves: CVE-2026-9856 Source...

langchain-timbr (>=2.1.0, <=3.3.0), otat (>=0.1.0, <=0.1.3) +5 more potentially affected by CVE-2026-5241 via transformers (4.57.0)

transformers PYPI version 4.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - langchain-timbr =2.1.0, =0.1.0, =1.0.1, =0.5.3rc2, =1.1.4, =0.0.1, =0.1.3 - vllm-kunlun 0.11.1 Source cves: CVE-2026-5241 Source...

langchain-timbr (>=2.1.0, <=2.1.4) potentially affected by CVE-2026-34070 via langchain-core (0.3.78)

langchain-core PYPI version 0.3.78 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - langchain-timbr =2.1.0, =2.1.4 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

langchain-timbr (>=2.1.0, <=2.1.4) potentially affected by CVE-2026-34070 via langchain-core (0.3.78)

langchain-core PYPI version 0.3.78 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - langchain-timbr =2.1.0, =2.1.4 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...