{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9639?format=json","vulnerability_id":"VCID-8mrq-f3bg-nqhy","summary":"LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image token counting) validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled hostname could resolve to a public IP during validation and then to a private/localhost IP during the actual fetch.","aliases":[{"alias":"CVE-2026-41488"},{"alias":"GHSA-r7w7-9xr2-qq2r"},{"alias":"PYSEC-2026-76"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/48721?format=json","purl":"pkg:pypi/langchain-openai@1.1.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.14"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/48601?format=json","purl":"pkg:pypi/langchain-openai@0.0.1rc0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.1rc0"},{"url":"http://public2.vulnerablecode.io/api/packages/48602?format=json","purl":"pkg:pypi/langchain-openai@0.0.1rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.1rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48603?format=json","purl":"pkg:pypi/langchain-openai@0.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48604?format=json","purl":"pkg:pypi/langchain-openai@0.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48605?format=json","purl":"pkg:pypi/langchain-openai@0.0.2.post1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.2.post1"},{"url":"http://public2.vulnerablecode.io/api/packages/48606?format=json","purl":"pkg:pypi/langchain-openai@0.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48607?format=json","purl":"pkg:pypi/langchain-openai@0.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/48608?format=json","purl":"pkg:pypi/langchain-openai@0.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.5"},{"url":"http://public2.vulnerablecode.io/api/packages/48609?format=json","purl":"pkg:pypi/langchain-openai@0.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.6"},{"url":"http://public2.vulnerablecode.io/api/packages/48610?format=json","purl":"pkg:pypi/langchain-openai@0.0.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.7"},{"url":"http://public2.vulnerablecode.io/api/packages/48611?format=json","purl":"pkg:pypi/langchain-openai@0.0.8rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.8rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48612?format=json","purl":"pkg:pypi/langchain-openai@0.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.0.8"},{"url":"http://public2.vulnerablecode.io/api/packages/48613?format=json","purl":"pkg:pypi/langchain-openai@0.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/48614?format=json","purl":"pkg:pypi/langchain-openai@0.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48615?format=json","purl":"pkg:pypi/langchain-openai@0.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48616?format=json","purl":"pkg:pypi/langchain-openai@0.1.3rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.3rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48617?format=json","purl":"pkg:pypi/langchain-openai@0.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48618?format=json","purl":"pkg:pypi/langchain-openai@0.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/48619?format=json","purl":"pkg:pypi/langchain-openai@0.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/48620?format=json","purl":"pkg:pypi/langchain-openai@0.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/48621?format=json","purl":"pkg:pypi/langchain-openai@0.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/48622?format=json","purl":"pkg:pypi/langchain-openai@0.1.8rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.8rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48623?format=json","purl":"pkg:pypi/langchain-openai@0.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/48624?format=json","purl":"pkg:pypi/langchain-openai@0.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/48625?format=json","purl":"pkg:pypi/langchain-openai@0.1.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.10"},{"url":"http://public2.vulnerablecode.io/api/packages/48626?format=json","purl":"pkg:pypi/langchain-openai@0.1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/48627?format=json","purl":"pkg:pypi/langchain-openai@0.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/48628?format=json","purl":"pkg:pypi/langchain-openai@0.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.13"},{"url":"http://public2.vulnerablecode.io/api/packages/48629?format=json","purl":"pkg:pypi/langchain-openai@0.1.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.14"},{"url":"http://public2.vulnerablecode.io/api/packages/48630?format=json","purl":"pkg:pypi/langchain-openai@0.1.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.15"},{"url":"http://public2.vulnerablecode.io/api/packages/48631?format=json","purl":"pkg:pypi/langchain-openai@0.1.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.16"},{"url":"http://public2.vulnerablecode.io/api/packages/48632?format=json","purl":"pkg:pypi/langchain-openai@0.1.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.17"},{"url":"http://public2.vulnerablecode.io/api/packages/48633?format=json","purl":"pkg:pypi/langchain-openai@0.1.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.19"},{"url":"http://public2.vulnerablecode.io/api/packages/48634?format=json","purl":"pkg:pypi/langchain-openai@0.1.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.20"},{"url":"http://public2.vulnerablecode.io/api/packages/48635?format=json","purl":"pkg:pypi/langchain-openai@0.1.21rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.21rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48636?format=json","purl":"pkg:pypi/langchain-openai@0.1.21rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.21rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/48637?format=json","purl":"pkg:pypi/langchain-openai@0.1.21","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.21"},{"url":"http://public2.vulnerablecode.io/api/packages/48638?format=json","purl":"pkg:pypi/langchain-openai@0.1.22","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.22"},{"url":"http://public2.vulnerablecode.io/api/packages/48639?format=json","purl":"pkg:pypi/langchain-openai@0.1.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.23"},{"url":"http://public2.vulnerablecode.io/api/packages/48640?format=json","purl":"pkg:pypi/langchain-openai@0.1.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.24"},{"url":"http://public2.vulnerablecode.io/api/packages/48641?format=json","purl":"pkg:pypi/langchain-openai@0.1.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.1.25"},{"url":"http://public2.vulnerablecode.io/api/packages/48642?format=json","purl":"pkg:pypi/langchain-openai@0.2.0.dev0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.0.dev0"},{"url":"http://public2.vulnerablecode.io/api/packages/48643?format=json","purl":"pkg:pypi/langchain-openai@0.2.0.dev1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.0.dev1"},{"url":"http://public2.vulnerablecode.io/api/packages/48644?format=json","purl":"pkg:pypi/langchain-openai@0.2.0.dev2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.0.dev2"},{"url":"http://public2.vulnerablecode.io/api/packages/48645?format=json","purl":"pkg:pypi/langchain-openai@0.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/48646?format=json","purl":"pkg:pypi/langchain-openai@0.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48647?format=json","purl":"pkg:pypi/langchain-openai@0.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48648?format=json","purl":"pkg:pypi/langchain-openai@0.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48649?format=json","purl":"pkg:pypi/langchain-openai@0.2.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.4"},{"url":"http://public2.vulnerablecode.io/api/packages/48650?format=json","purl":"pkg:pypi/langchain-openai@0.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/48651?format=json","purl":"pkg:pypi/langchain-openai@0.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.6"},{"url":"http://public2.vulnerablecode.io/api/packages/48652?format=json","purl":"pkg:pypi/langchain-openai@0.2.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.7"},{"url":"http://public2.vulnerablecode.io/api/packages/48653?format=json","purl":"pkg:pypi/langchain-openai@0.2.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.8"},{"url":"http://public2.vulnerablecode.io/api/packages/48654?format=json","purl":"pkg:pypi/langchain-openai@0.2.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.9"},{"url":"http://public2.vulnerablecode.io/api/packages/48655?format=json","purl":"pkg:pypi/langchain-openai@0.2.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.10"},{"url":"http://public2.vulnerablecode.io/api/packages/48656?format=json","purl":"pkg:pypi/langchain-openai@0.2.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.11"},{"url":"http://public2.vulnerablecode.io/api/packages/48657?format=json","purl":"pkg:pypi/langchain-openai@0.2.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.12"},{"url":"http://public2.vulnerablecode.io/api/packages/48658?format=json","purl":"pkg:pypi/langchain-openai@0.2.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.13"},{"url":"http://public2.vulnerablecode.io/api/packages/48659?format=json","purl":"pkg:pypi/langchain-openai@0.2.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.2.14"},{"url":"http://public2.vulnerablecode.io/api/packages/48660?format=json","purl":"pkg:pypi/langchain-openai@0.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/48661?format=json","purl":"pkg:pypi/langchain-openai@0.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48662?format=json","purl":"pkg:pypi/langchain-openai@0.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48663?format=json","purl":"pkg:pypi/langchain-openai@0.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48664?format=json","purl":"pkg:pypi/langchain-openai@0.3.4rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.4rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48665?format=json","purl":"pkg:pypi/langchain-openai@0.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/48666?format=json","purl":"pkg:pypi/langchain-openai@0.3.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.5"},{"url":"http://public2.vulnerablecode.io/api/packages/48667?format=json","purl":"pkg:pypi/langchain-openai@0.3.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.6"},{"url":"http://public2.vulnerablecode.io/api/packages/48668?format=json","purl":"pkg:pypi/langchain-openai@0.3.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.7"},{"url":"http://public2.vulnerablecode.io/api/packages/48669?format=json","purl":"pkg:pypi/langchain-openai@0.3.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.8"},{"url":"http://public2.vulnerablecode.io/api/packages/48670?format=json","purl":"pkg:pypi/langchain-openai@0.3.9rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.9rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/48671?format=json","purl":"pkg:pypi/langchain-openai@0.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.9"},{"url":"http://public2.vulnerablecode.io/api/packages/48672?format=json","purl":"pkg:pypi/langchain-openai@0.3.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.10"},{"url":"http://public2.vulnerablecode.io/api/packages/48673?format=json","purl":"pkg:pypi/langchain-openai@0.3.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.11"},{"url":"http://public2.vulnerablecode.io/api/packages/48674?format=json","purl":"pkg:pypi/langchain-openai@0.3.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.12"},{"url":"http://public2.vulnerablecode.io/api/packages/48675?format=json","purl":"pkg:pypi/langchain-openai@0.3.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.13"},{"url":"http://public2.vulnerablecode.io/api/packages/48676?format=json","purl":"pkg:pypi/langchain-openai@0.3.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.14"},{"url":"http://public2.vulnerablecode.io/api/packages/48677?format=json","purl":"pkg:pypi/langchain-openai@0.3.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.15"},{"url":"http://public2.vulnerablecode.io/api/packages/48678?format=json","purl":"pkg:pypi/langchain-openai@0.3.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.16"},{"url":"http://public2.vulnerablecode.io/api/packages/48679?format=json","purl":"pkg:pypi/langchain-openai@0.3.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.17"},{"url":"http://public2.vulnerablecode.io/api/packages/48680?format=json","purl":"pkg:pypi/langchain-openai@0.3.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.18"},{"url":"http://public2.vulnerablecode.io/api/packages/48681?format=json","purl":"pkg:pypi/langchain-openai@0.3.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.19"},{"url":"http://public2.vulnerablecode.io/api/packages/48682?format=json","purl":"pkg:pypi/langchain-openai@0.3.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.20"},{"url":"http://public2.vulnerablecode.io/api/packages/48683?format=json","purl":"pkg:pypi/langchain-openai@0.3.21","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.21"},{"url":"http://public2.vulnerablecode.io/api/packages/48684?format=json","purl":"pkg:pypi/langchain-openai@0.3.22","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.22"},{"url":"http://public2.vulnerablecode.io/api/packages/48685?format=json","purl":"pkg:pypi/langchain-openai@0.3.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.23"},{"url":"http://public2.vulnerablecode.io/api/packages/48686?format=json","purl":"pkg:pypi/langchain-openai@0.3.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.24"},{"url":"http://public2.vulnerablecode.io/api/packages/48687?format=json","purl":"pkg:pypi/langchain-openai@0.3.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.25"},{"url":"http://public2.vulnerablecode.io/api/packages/48688?format=json","purl":"pkg:pypi/langchain-openai@0.3.26","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.26"},{"url":"http://public2.vulnerablecode.io/api/packages/48689?format=json","purl":"pkg:pypi/langchain-openai@0.3.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.27"},{"url":"http://public2.vulnerablecode.io/api/packages/48690?format=json","purl":"pkg:pypi/langchain-openai@0.3.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.28"},{"url":"http://public2.vulnerablecode.io/api/packages/48691?format=json","purl":"pkg:pypi/langchain-openai@0.3.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.29"},{"url":"http://public2.vulnerablecode.io/api/packages/48692?format=json","purl":"pkg:pypi/langchain-openai@0.3.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.30"},{"url":"http://public2.vulnerablecode.io/api/packages/48693?format=json","purl":"pkg:pypi/langchain-openai@0.3.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.31"},{"url":"http://public2.vulnerablecode.io/api/packages/48694?format=json","purl":"pkg:pypi/langchain-openai@0.3.32","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.32"},{"url":"http://public2.vulnerablecode.io/api/packages/48695?format=json","purl":"pkg:pypi/langchain-openai@0.3.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.33"},{"url":"http://public2.vulnerablecode.io/api/packages/48696?format=json","purl":"pkg:pypi/langchain-openai@0.3.34","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.34"},{"url":"http://public2.vulnerablecode.io/api/packages/48697?format=json","purl":"pkg:pypi/langchain-openai@0.3.35","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.3.35"},{"url":"http://public2.vulnerablecode.io/api/packages/48698?format=json","purl":"pkg:pypi/langchain-openai@0.4.0.dev0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@0.4.0.dev0"},{"url":"http://public2.vulnerablecode.io/api/packages/48699?format=json","purl":"pkg:pypi/langchain-openai@1.0.0a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.0a1"},{"url":"http://public2.vulnerablecode.io/api/packages/48700?format=json","purl":"pkg:pypi/langchain-openai@1.0.0a2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.0a2"},{"url":"http://public2.vulnerablecode.io/api/packages/48701?format=json","purl":"pkg:pypi/langchain-openai@1.0.0a3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.0a3"},{"url":"http://public2.vulnerablecode.io/api/packages/48702?format=json","purl":"pkg:pypi/langchain-openai@1.0.0a4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.0a4"},{"url":"http://public2.vulnerablecode.io/api/packages/48703?format=json","purl":"pkg:pypi/langchain-openai@1.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/48704?format=json","purl":"pkg:pypi/langchain-openai@1.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48705?format=json","purl":"pkg:pypi/langchain-openai@1.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48706?format=json","purl":"pkg:pypi/langchain-openai@1.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48707?format=json","purl":"pkg:pypi/langchain-openai@1.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/48708?format=json","purl":"pkg:pypi/langchain-openai@1.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/48709?format=json","purl":"pkg:pypi/langchain-openai@1.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/48710?format=json","purl":"pkg:pypi/langchain-openai@1.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/48711?format=json","purl":"pkg:pypi/langchain-openai@1.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/48712?format=json","purl":"pkg:pypi/langchain-openai@1.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/48713?format=json","purl":"pkg:pypi/langchain-openai@1.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/48714?format=json","purl":"pkg:pypi/langchain-openai@1.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/48715?format=json","purl":"pkg:pypi/langchain-openai@1.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/48716?format=json","purl":"pkg:pypi/langchain-openai@1.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/48717?format=json","purl":"pkg:pypi/langchain-openai@1.1.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.10"},{"url":"http://public2.vulnerablecode.io/api/packages/48718?format=json","purl":"pkg:pypi/langchain-openai@1.1.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.11"},{"url":"http://public2.vulnerablecode.io/api/packages/48719?format=json","purl":"pkg:pypi/langchain-openai@1.1.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.12"},{"url":"http://public2.vulnerablecode.io/api/packages/48720?format=json","purl":"pkg:pypi/langchain-openai@1.1.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8mrq-f3bg-nqhy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/langchain-openai@1.1.13"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-41488.json","reference_id":"","reference_type":"","scores":[{"value":"3.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-41488.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-41488","reference_id":"","reference_type":"","scores":[{"value":"0.00026","scoring_system":"epss","scoring_elements":"0.07954","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-41488"},{"reference_url":"https://github.com/langchain-ai/langchain","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/langchain-ai/langchain"},{"reference_url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-r7w7-9xr2-qq2r","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-27T13:40:34Z/"}],"url":"https://github.com/langchain-ai/langchain/security/advisories/GHSA-r7w7-9xr2-qq2r"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41488","reference_id":"","reference_type":"","scores":[{"value":"3.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41488"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461734","reference_id":"2461734","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461734"},{"reference_url":"https://github.com/advisories/GHSA-r7w7-9xr2-qq2r","reference_id":"GHSA-r7w7-9xr2-qq2r","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-r7w7-9xr2-qq2r"}],"weaknesses":[{"cwe_id":367,"name":"Time-of-check Time-of-use (TOCTOU) Race Condition","description":"The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state."},{"cwe_id":918,"name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"0.1 - 3.4","exploitability":"0.5","weighted_severity":"3.1","risk_score":1.6,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8mrq-f3bg-nqhy"}