ragbuilder (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-26013 via langchain-core (0.2.20)

langchain-core PYPI version 0.2.20 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ragbuilder =0.1.0, =0.1.5 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...