graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-48775 Source advisory: OSV:PYSEC-2026-2573...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-27794 Source advisory: OSV:PYSEC-2026-2574...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-26013 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:PYSEC-2026-1527...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-48775 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

atom-llm (0.1.0), docksec (>=2026.2.23, <=2026.5.6) +5 more potentially affected by CVE-2026-41481 via langchain-text-splitters (0.3.4)

langchain-text-splitters PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-text-splitters and may be impacted: - atom-llm 0.1.0 - docksec =2026.2.23, =0.1.2, =0.1.0, =1.0.0, =2.0.4 Source cves: CVE-2026-41481 Source advisory:...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

carton-mcp (>=0.1.80, <=0.1.83), cave-harness (0.1.0) +7 more potentially affected by CVE-2026-28277 via langgraph (0.2.60)

langgraph PYPI version 0.2.60 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.4.0, =0.1.3, =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

carton-mcp (>=0.1.80, <=0.1.83), cave-harness (0.1.0) +7 more potentially affected by CVE-2026-28277 via langgraph (0.2.60)

langgraph PYPI version 0.2.60 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - carton-mcp =0.1.80, =0.1.24, =0.4.0, =0.1.3, =0.1.0, =0.1.1 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2026-27794 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2026-27794 Source advisory: OSV:GHSA-MHR3-J7M5-C7C9...

aa-rag (>=0.1.0, <=0.4.1), graphtomation (>=0.0.3, <=0.0.5) +4 more potentially affected by CVE-2026-26013 via langchain-core (0.3.29)

langchain-core PYPI version 0.3.29 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.1.0, =0.0.3, =0.3.0, =0.1.1, =0.0.30, =0.0.33 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

graphtomation (0.0.5), lorax-ai (0.1.0) potentially affected by CVE-2025-64439 via langgraph-checkpoint (2.0.9)

langgraph-checkpoint PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint and may be impacted: - graphtomation 0.0.5 - lorax-ai 0.1.0 Source cves: CVE-2025-64439 Source advisory: OSV:GHSA-WWQV-P2PP-99H5...