{"data":{"ecosystem":"pypi","name":"langchain-nvidia-ai-endpoints","url":"https://aisecwatch.com/packages/pypi/langchain-nvidia-ai-endpoints","latestVersion":"1.4.3","firstReleaseAt":"2023-12-15T20:26:03.996Z","repository":"https://github.com/langchain-ai/langchain-nvidia/tree/main/libs/ai-endpoints","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-12-15T20:26:03.996Z","integratedVersion":"0.0.1","sdks":["langchain"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:aiohttp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"langchain-core","versionSpec":"<2.0.0,>=1.4.7","scope":"runtime"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":"<3.15.0,>=3.13.3","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":">=2.28.0","scope":"runtime"}],"advisories":[{"id":"07d4ff62-7a0c-4fac-8174-051a9b667a82","url":"https://aisecwatch.com/issues/07d4ff62-7a0c-4fac-8174-051a9b667a82","cveId":null,"title":"GHSA-g28h-2cmm-rj9x: langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs","headline":null,"severity":"high","publishedAt":"2026-09-24T19:25:36.000Z","affected":["langchain-nvidia-ai-endpoints@<= 1.4.1 (fixed: 1.4.2)"],"epssScore":null}],"checkedAt":"2026-10-09T23:58:46.206Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}