autotrain-advanced (>=0.8.18, <=0.8.20), langchange (0.1.0) +2 more potentially affected by CVE-2026-68770 via sentence-transformers (3.1.0)

sentence-transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - autotrain-advanced =0.8.18, =0.3.21, =0.3.48 - webleaf 0.3.4 Source cves: CVE-2026-68770 Source advisory:...

autotrain-advanced (>=0.8.18, <=0.8.20), langchange (0.1.0) +2 more potentially affected by CVE-2026-68770 via sentence-transformers (3.1.0)

sentence-transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - autotrain-advanced =0.8.18, =0.3.21, =0.3.48 - webleaf 0.3.4 Source cves: CVE-2026-68770 Source advisory:...

chainlite (0.3.6), dsparse (0.0.2) +4 more potentially affected by CVE-2026-26013 via langchain-core (0.3.12)

langchain-core PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chainlite 0.3.6 - dsparse 0.0.2 - pydocify =0.1.0, =0.4.16, =0.4.15, =0.5.38, =0.5.67 Source cves: CVE-2026-26013 Source advisory:...

aiagents4pharma (>=1.8.2, <=1.22.3), mkinf (0.1.1) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.31)

langchain-core PYPI version 0.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aiagents4pharma =1.8.2, =0.6.51, =0.6.52 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

ailite (6.1.10), readet (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.24)

langchain-core PYPI version 0.3.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ailite 6.1.10 - readet =0.1.0, =0.5.68, =0.6.39 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

ecq-llmfactory (>=0.1.7, <=0.1.10), mcp-hive (>=0.1.0, <=0.4.0) +3 more potentially affected by CVE-2026-55443 via langchain (0.3.15)

langchain PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ecq-llmfactory =0.1.7, =0.1.0, =0.7.0, =0.6.51, =0.6.52 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

khoj (>=1.41.1.dev34, <=2.0.0b16.dev0), khoj-assistant (>=1.21.0, <=1.21.1) +3 more potentially affected by CVE-2026-55443 via langchain (0.3.11)

langchain PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - khoj =1.41.1.dev34, =1.21.0, =0.1.0, =0.1.0a3, =0.5.68, =0.6.39 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

ecq-llmfactory (>=0.1.7, <=0.1.10), mcp-hive (>=0.1.0, <=0.4.0) +3 more potentially affected by CVE-2026-55443 via langchain (0.3.15)

langchain PYPI version 0.3.15 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ecq-llmfactory =0.1.7, =0.1.0, =0.7.0, =0.6.51, =0.6.52 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

khoj (>=1.41.1.dev34, <=2.0.0b16.dev0), khoj-assistant (>=1.21.0, <=1.21.1) +3 more potentially affected by CVE-2026-55443 via langchain (0.3.11)

langchain PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - khoj =1.41.1.dev34, =1.21.0, =0.1.0, =0.1.0a3, =0.5.68, =0.6.39 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

brickllm (>=1.0.0, <=1.3.0), bugbug (>=0.0.557, <=0.0.560) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.0)

langchain-openai PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - brickllm =1.0.0, =0.0.557, =0.1.0, =0.0.4, =0.3.49, =0.4.14 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ai-shell-agent (>=0.1.0, <=0.2.2), toolmate-lite (>=0.6.51, <=0.6.52) potentially affected by CVE-2026-41488 via langchain-openai (0.3.2)

langchain-openai PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-shell-agent =0.1.0, =0.6.51, =0.6.52 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

toolmate (>=0.3.21, <=0.3.48) potentially affected by CVE-2026-41488 via langchain-openai (0.1.24)

langchain-openai PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - toolmate =0.3.21, =0.3.48 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.12)

langchain-openai PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =0.1.0, =0.5.68, =0.6.39 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

ai-shell-agent (>=0.1.0, <=0.2.2), toolmate-lite (>=0.6.51, <=0.6.52) potentially affected by CVE-2026-41488 via langchain-openai (0.3.2)

langchain-openai PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - ai-shell-agent =0.1.0, =0.6.51, =0.6.52 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

brickllm (>=1.0.0, <=1.3.0), bugbug (>=0.0.557, <=0.0.560) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.0)

langchain-openai PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - brickllm =1.0.0, =0.0.557, =0.1.0, =0.0.4, =0.3.49, =0.4.14 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

toolmate (>=0.3.21, <=0.3.48) potentially affected by CVE-2026-41488 via langchain-openai (0.1.24)

langchain-openai PYPI version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - toolmate =0.3.21, =0.3.48 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

commit-crafter-ai (>=1.0.1, <=1.0.3), cori-ai (>=0.0.0, <=1.2.12) +3 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.12)

langchain-openai PYPI version 0.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - commit-crafter-ai =1.0.1, =0.0.0, =0.1.0, =0.5.68, =0.6.39 Source cves: CVE-2026-41488 Source advisory: OSV:GHSA-R7W7-9XR2-QQ2R...

ailite (6.1.10), readet (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.3.24)

langchain-core PYPI version 0.3.24 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ailite 6.1.10 - readet =0.1.0, =0.5.68, =0.6.39 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

brickllm (>=1.0.0, <=1.2.0), dm-aioaiagent (>=0.1.0, <=0.3.0) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.3.5)

langchain-core PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - brickllm =1.0.0, =0.1.0, =0.3.49, =0.4.14 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

aiagents4pharma (>=1.8.2, <=1.22.3), mkinf (0.1.1) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.3.31)

langchain-core PYPI version 0.3.31 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aiagents4pharma =1.8.2, =0.6.51, =0.6.52 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...