ragstack-ai-langchain (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-55443 via langchain (0.1.19)

langchain PYPI version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ragstack-ai-langchain =1.0.2, =1.0.7 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

bugbug (0.0.550), ceylon (>=0.14.13, <=0.16.16) +4 more potentially affected by CVE-2026-55443 via langchain (0.2.10)

langchain PYPI version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - bugbug 0.0.550 - ceylon =0.14.13, =0.0.51, =0.0.55 - ragstack-ai-langchain 1.4.0 Source cves: CVE-2026-55443 Source advisory:...

platform-gen-ai (>=0.1.0, <=0.1.1), ragstack-ai-langchain (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-41488 via langchain-openai (0.1.3)

langchain-openai PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - platform-gen-ai =0.1.0, =1.0.0, =1.0.7 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

platform-gen-ai (>=0.1.0, <=0.1.1), ragstack-ai-langchain (>=1.0.0, <=1.0.7) potentially affected by CVE-2026-41488 via langchain-openai (0.1.3)

langchain-openai PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - platform-gen-ai =0.1.0, =1.0.0, =1.0.7 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

cvekit (>=1.0.0, <=1.0.7), elyuf (0.2.0) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.2.9)

langchain-core PYPI version 0.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - cvekit =1.0.0, =1.0.7 - elyuf 0.2.0 - ragstack-ai-langchain 1.3.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

chat-with-mlx (>=0.2.0, <=0.2.2), ragstack-ai-langchain (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-34070 via langchain-core (0.1.45)

langchain-core PYPI version 0.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.2.0, =1.0.0, =1.0.1 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

ragstack-ai-langchain (1.4.0) potentially affected by CVE-2026-34070 via langchain-core (0.2.22)

langchain-core PYPI version 0.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ragstack-ai-langchain 1.4.0 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

ragstack-ai-langchain (1.4.0) potentially affected by CVE-2026-34070 via langchain-core (0.2.22)

langchain-core PYPI version 0.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ragstack-ai-langchain 1.4.0 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...

chat-with-mlx (>=0.2.0, <=0.2.2), ragstack-ai-langchain (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-34070 via langchain-core (0.1.45)

langchain-core PYPI version 0.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.2.0, =1.0.0, =1.0.1 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...