cvekit (>=1.0.0, <=1.0.7), elyuf (0.2.0) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.2.9)

langchain-core PYPI version 0.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - cvekit =1.0.0, =1.0.7 - elyuf 0.2.0 - ragstack-ai-langchain 1.3.0 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...