Issues - composio-langchain - PyPI | ReversingLabs Spectra Assure Community

Problem

Software composition analysis has identified a component with one or more known severe vulnerabilities. Available threat intelligence telemetry has confirmed that the reported high or critical severity vulnerabilities are actively being exploited by malicious actors.

Prevalence in PyPI community

35 packages

found in

Top 100

210 packages

found in

Top 1k

1787 packages

found in

Top 10k

86.39k packages

in community

Next steps

We strongly advise updating the component to the latest version.

If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Problem

Software composition analysis has identified a component with one or more known vulnerabilities. Based on the CVSS scoring, these vulnerabilities have been marked as critical severity.

Prevalence in PyPI community

27 packages

found in

Top 100

156 packages

found in

Top 1k

1294 packages

found in

Top 10k

58.62k packages

in community

Next steps

Perform impact analysis for the reported CVEs.

We strongly advise updating the component to the latest version.

If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Problem

Software composition analysis has identified a component with one or more known vulnerabilities. Based on the CVSS scoring, these vulnerabilities have been marked as medium severity.

Prevalence in PyPI community

36 packages

found in

Top 100

209 packages

found in

Top 1k

1750 packages

found in

Top 10k

81.53k packages

in community

Next steps

Perform impact analysis for the reported CVEs.

Update the component to the latest version.

If the update can't resolve the issue, create a plan to isolate or replace the affected component.

composio-langchain

SAFE Assessment

Compliance

Security

Threats

INCIDENTS FOR THIS VERSION:

Problem

Prevalence in PyPI community

Next steps

Problem

Prevalence in PyPI community

Next steps

Problem

Prevalence in PyPI community

Next steps

Did you know...

Problem

Prevalence in PyPI community

Next steps

Problem

Prevalence in PyPI community

Next steps

Problem

Prevalence in PyPI community

Next steps

composio-langchain

SAFE Assessment

Compliance

Security

Threats

IMPORTANT: This package had 16 removal incidents in versions published within 2 years prior to the latestLatest version with removal incident detected: over 1 year agoVersion: 0.6.11

INCIDENTS FOR THIS VERSION:

SQ31102Detected presence of severe vulnerabilities with active exploitation.Causes risk: actively exploited vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps

SQ31104Detected presence of critical severity vulnerabilities.Causes risk: critical severity vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps

SQ31106Detected presence of medium severity vulnerabilities.Causes risk: medium severity vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps

Did you know...

SQ31102Detected presence of severe vulnerabilities with active exploitation.Causes risk: actively exploited vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps

SQ31104Detected presence of critical severity vulnerabilities.Causes risk: critical severity vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps

SQ31106Detected presence of medium severity vulnerabilities.Causes risk: medium severity vulnerabilitiesvulnerabilities

Problem

Prevalence in PyPI community

Next steps