dsrag (>=0.1.0, <=0.3.8), jpl-rosa (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-26013 via langchain-core (0.2.12)

langchain-core PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - dsrag =0.1.0, =1.0.0, =1.0.2 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

jpl-rosa (1.0.7) potentially affected by CVE-2026-26013 via langchain-core (0.3.9)

langchain-core PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - jpl-rosa 1.0.7 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

jpl-rosa (>=1.0.3, <=1.0.4), searchbot (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-26013 via langchain-core (0.2.32)

langchain-core PYPI version 0.2.32 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - jpl-rosa =1.0.3, =1.0.0, =1.0.8 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

embedding-ada (>=0.1.3, <=0.1.7), jpl-rosa (>=1.0.5, <=1.0.6) potentially affected by CVE-2026-26013 via langchain-core (0.2.34)

langchain-core PYPI version 0.2.34 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - embedding-ada =0.1.3, =1.0.5, =1.0.6 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

gen-ui-kit (0.1.1), jpl-rosa (1.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.3.2)

langchain PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gen-ui-kit 0.1.1 - jpl-rosa 1.0.7 - myscalekb-agent-base =0.0.1, =0.1.6 - originhub-myscalekb-agent-base 0.1.8 Source cves: CVE-2026-55443...

byzerllm (>=0.1.184, <=0.1.190), hspylib-askai (1.0.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.2.7)

langchain PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - byzerllm =0.1.184, =1.0.0, =0.1.4, =0.1.23 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jpl-rosa (>=1.0.3, <=1.0.4), officelytest (>=0.1.5, <=0.1.12) potentially affected by CVE-2026-55443 via langchain (0.2.13)

langchain PYPI version 0.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jpl-rosa =1.0.3, =0.1.5, =0.1.12 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

jpl-rosa (>=1.0.3, <=1.0.4), officelytest (>=0.1.5, <=0.1.12) potentially affected by CVE-2026-55443 via langchain (0.2.13)

langchain PYPI version 0.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - jpl-rosa =1.0.3, =0.1.5, =0.1.12 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

gen-ui-kit (0.1.1), jpl-rosa (1.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.3.2)

langchain PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gen-ui-kit 0.1.1 - jpl-rosa 1.0.7 - myscalekb-agent-base =0.0.1, =0.1.6 - originhub-myscalekb-agent-base 0.1.8 Source cves: CVE-2026-55443...

byzerllm (>=0.1.184, <=0.1.190), hspylib-askai (1.0.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.2.7)

langchain PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - byzerllm =0.1.184, =1.0.0, =0.1.4, =0.1.23 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

CVE-2026-8863

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...

EUVD-2026-35791

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...

Advisory ROSA-SA-2026-3312

Software: ffmpeg 4.4.6 OS: ROSA-CHROME Unaffected versions: = ffmpeg-4.4.6-4 Affected versions: ffmpeg-4.4.6-4 CVE-ID: CVE-2026-40962 BDU-ID: None CVE-Crit: Medium CVE-DESCRIPTION: The vulnerability related to integer overflow in FFmpeg allows an attacker to execute write operations beyond the...

Advisory ROSA-SA-2026-3311

Component: avahi 0.8 OS: ROSA-CHROME Unaffected versions: = avahi-0.8-12.git35bb1b.11 Affected versions: avahi-0.8-12.git35bb1b.11 CVE-ID: CVE-2026-34933 BDU-ID: None CVE-Crit: Medium CVE-DESC.: The vulnerability in Avahi allows an unprivileged local user to cause an emergency termination of...

Advisory ROSA-SA-2026-3307

Software: python-future 0.18.2 Operating System: ROSA-CHROME Unaffected versions: = python-future-0.18.2-4 Affected versions: python-future-0.18.2-4 CVE-ID: CVE-2022-40899 BDU-ID: 2023-02446 CVE-Crit: HIGH CVE-DESCRIPTION: The compatibility vulnerability in Python Charmers Future is related to...

Advisory ROSA-SA-2026-3306

Component: PHP 7.4.33 OS: ROSA-CHROME Affected versions: = php-7.4.33-13 Affected versions: php-7.4.33-13 CVE-ID: CVE-2024-5458 BDU-ID: 2024-04846 CVE-Crit: Medium CVE-DESCRIPTION: The vulnerability in the filtervar function of the PHP interpreter involves insufficient validation of data...

Advisory ROSA-SA-2026-3301

Component: libconfuse 3.3 Operating System: ROSA-CHROME Unaffected versions: = libconfuse-3.3-3 Affected versions: libconfuse-3.3-3 CVE-ID: CVE-2022-40320 BDU-ID: 2022-05795 CVE-Crit: LOW CVE-DESC.: The vulnerability in the cfgtildeexpand function of the configuration file parser library libConfu...

Advisory ROSA-SA-2026-3299

Package: iputils 20221126 OS: ROSA-CHROME Unaffected versions: = iputils-20221126-2 Affected versions: iputils-20221126-2 CVE-ID: CVE-2025-47268 BDU-ID: 2025-11086 CVE-Crit: Medium CVE-DESC.: The vulnerability in the ICMP Echo Reply ping utility tool is related to a numerical overflow. Exploiting...

Advisory ROSA-SA-2026-3295

Component: kernel-ml 5.15.208 OS: rosa-server79 Unaffected versions: = kernel-ml-5.15.208-1.0.1.res7 Affected versions: kernel-ml-5.15.208-1.0.1.res7 CVE-ID: CVE-2026-46300 BDU-ID: None CVE-Crit: Not available CVE-DESCRIPTION: A vulnerability in the XFRM ESP-in-TCP subsystem of Linux kernels. A...

Advisory ROSA-SA-2026-3289

software: kernel-6.1 6.1.152 OS: ROSA-CHROME unaffected versions = kernel-6.1-6.1.1.152-4 affected versions data.opnents field during buffer management. By exploiting the RDS TCP transport SORDSTRANSPORT=2 in conjunction with iouring, a local unprivileged attacker can cause memory corruption and...