StackRadar

CVE-2026-41182

Medium

Advisory

Published 16 Apr 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,787 indexed, latest versions
Container images
27
deployed by those charts
Fix available
2 of 2
affected packages

LangSmith SDK: Streaming token events bypass output redaction

Carried by container images the latest versions of 28 of 17,787 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
langsmithpypi0.0.87, 0.1.67, 0.1.71, 0.1.93+10 more0.7.3120
langsmithnpm0.1.13, 0.1.61, 0.2.13, 0.2.15+3 more0.5.197
OSV records
GHSA-rr7j-v2q5-chgv
Also known as
PYSEC-2026-2583

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
langsmith@0.1.13
0.5.19

Open the chart page →

5,639
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
langsmith@0.1.61
0.5.19

Open the chart page →

2,654
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
langsmith@0.1.71
0.7.31

Open the chart page →

17,475
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
langsmith@0.0.87
0.7.31

Open the chart page →

11,236
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
langsmith@0.1.147
0.7.31

Open the chart page →

1,696
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
langsmith@0.6.8
0.7.31

Open the chart page →

12,910
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
langsmith@0.2.13
0.5.19

Open the chart page →

4,881
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
langsmith@0.1.71
0.7.31

Open the chart page →

10,171
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
langsmith@0.1.93
0.7.31

Open the chart page →

4,048
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
langsmith@0.3.45
0.7.31
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
langsmith@0.6.4
0.7.31

Open the chart page →

59,131
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
langsmith@0.1.147
0.7.31

Open the chart page →

19,063
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
langsmith@0.3.20
0.5.19

Open the chart page →

2,949
ilum-streamlitilumVerified publisher0.1.01 of 1See more

ilum-streamlit ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ilum/streamlit-example:1.0.0ce5dcdeb22ba
langsmith@0.4.47
0.7.31

Open the chart page →

2,748
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
langsmith@0.2.10
0.7.31

Open the chart page →

5,069
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
langsmith@0.2.15
0.5.19

Open the chart page →

5,826
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
langsmith@0.3.32
0.7.31

Open the chart page →

8,455
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
langsmith@0.7.22
0.7.31

Open the chart page →

2,553
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
langsmith@0.1.67
0.7.31

Open the chart page →

18,991
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
langsmith@0.3.13
0.7.31

Open the chart page →

3,406
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
langsmith@0.3.13
0.7.31

Open the chart page →

4,612
chatqnatest-opea1.0.02 of 11See more

chatqna test-opea 1.0.0

2 of the 11 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
langsmith@0.1.123
0.7.31
opea/retriever-redis:1.0eb746b263705
langsmith@0.1.123
0.7.31

Open the chart page →

36,661
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/llm-docsum-tgi:1.002f9e8fa5d71
langsmith@0.1.123
0.7.31

Open the chart page →

26,535
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
langsmith@0.1.123
0.7.31

Open the chart page →

4,829
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
langsmith@0.1.123
0.7.31

Open the chart page →

4,865
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
langsmith@0.1.123
0.7.31

Open the chart page →

4,842
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
langsmith@0.1.123
0.7.31

Open the chart page →

4,994
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
langsmith@0.3.55
0.5.19

Open the chart page →

6,470
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-41182.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
langsmith@0.3.7
0.5.19

Open the chart page →

6,323

Container images carrying it

27 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opea/embedding-tei:1.05c9639de61c1
langsmith@0.1.123
0.7.31
2
opea/retriever-redis:1.0eb746b263705
langsmith@0.1.123
0.7.31
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
langsmith@0.3.13
0.7.31
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
langsmith@0.2.13
0.5.19
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
langsmith@0.3.32
0.7.31
1
baserow/backend:1.31.1e0b3c8130b91
langsmith@0.1.71
0.7.31
1
baserow/baserow:1.30.1df0c42eb67e8
langsmith@0.1.71
0.7.31
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
langsmith@0.4.47
0.7.31
1
langgenius/dify-api:1.0.0066035f93856
langsmith@0.1.147
0.7.31
1
library/kibana:8.18.004c0fc150f3a
langsmith@0.3.7
0.5.19
1
n8nio/n8n:1.86.08b39ed5a2de9
langsmith@0.2.15
0.5.19
1
n8nio/n8n:1.33.1dd171d45102a
langsmith@0.1.13
0.5.19
1
n8nio/n8n:1.115.1ed16e560c40e
langsmith@0.3.55
0.5.19
1
opea/guardrails-tgi:1.0262c6048aab8
langsmith@0.1.123
0.7.31
1
opea/guardrails-tgi:latestf68bec6a1271
langsmith@0.2.10
0.7.31
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
langsmith@0.1.123
0.7.31
1
opea/web-retriever-chroma:1.0fe08165d7770
langsmith@0.1.123
0.7.31
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
langsmith@0.3.45
0.7.31
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
langsmith@0.6.4
0.7.31
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
langsmith@0.1.147
0.7.31
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
langsmith@0.6.8
0.7.31
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
langsmith@0.0.87
0.7.31
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
langsmith@0.3.20
0.5.19
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
langsmith@0.1.61
0.5.19
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
langsmith@0.1.93
0.7.31
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
langsmith@0.7.22
0.7.31
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
langsmith@0.1.67
0.7.31
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.