docksec (>=2026.2.23, <=2026.5.6) potentially affected by CVE-2026-34070 via langchain-core (0.3.26)

🗓️ 31 Mar 2026 03:15:58Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 2 Views

Vulnerability in langchain-core potentially impacts docksec.

Reporter	Title	Published	Views	Family All 313
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	5 May 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses langchain_core-0.3.86-py3-none-any.whl which is vulnerable to CVE-2026-34070	5 Aug 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in LangChain [CVE-2026-34070]	21 May 202615:23	–	ibm
GithubExploit	Exploit for CVE-2026-34070	26 Mar 202613:39	–	githubexploit
attackerkb	CVE-2026-34070	31 Mar 202602:01	–	attackerkb
Chainguard	CVE-2026-34070 vulnerabilities	11 Apr 202614:18	–	cgr
Circl	CVE-2026-34070	26 Mar 202613:13	–	circl
CNNVD	LangChain security vulnerabilities	31 Mar 202600:00	–	cnnvd

13 Jul 2026 07:15Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.01213

SSVC

docksec langchain-core PYPI