horde-client (>=1.0.2, <=1.0.3), rtdip-sdk (>=0.0.0, <=0.10.3) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.291)

langchain PYPI version 0.0.291 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - horde-client =1.0.2, =0.0.0, =0.0.18, =0.0.1, =0.0.12 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

horde-client (>=1.0.2, <=1.0.3), rtdip-sdk (>=0.0.0, <=0.10.3) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.291)

langchain PYPI version 0.0.291 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - horde-client =1.0.2, =0.0.0, =0.0.18, =0.0.1, =0.0.12 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

Watch out! Android Flubot spyware is spreading fast

Using a proven method of text messages about missed deliveries, an old player on the Android malware stage has returned for an encore. This time it seems to be very active, especially in the UK where Android users are being targeted by text messages containing a link to a particularly nasty piece...