aiagents4pharma (>=1.0.0, <=1.44.0), memoripy (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-41488 via langchain-openai (0.2.5)

langchain-openai PYPI version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagents4pharma =1.0.0, =0.1.0, =0.1.2 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

aiagents4pharma (>=1.0.0, <=1.44.0), memoripy (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-41488 via langchain-openai (0.2.5)

langchain-openai PYPI version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - aiagents4pharma =1.0.0, =0.1.0, =0.1.2 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

aiagents4pharma (>=1.0.0, <=1.6.0), langchain-anchorbrowser (0.1.0a3) +3 more potentially affected by CVE-2026-26013 via langchain-core (0.3.15)

langchain-core PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aiagents4pharma =1.0.0, =0.1.0, =0.1.1, =0.1.3 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

Malicious code in memoripy (npm)

The package memoripy was found to contain malicious code...

MAL-2025-26184 Malicious code in memoripy (npm)

The package memoripy was found to contain malicious code...