Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-jxw3-mjmx-3pqm
  • PyPI/langflow
 Langflow: Weak Fernet Key via random.seed() 6 hours ago
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-cf6m-vc3m-7cgm
  • PyPI/langflow
 Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass 6 hours ago
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-w584-2h2r-2hvf
  • PyPI/langflow
 Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description 6 hours ago
  • Fix available
  • Severity - 8.8 (High)
GHSA-9fpm-3445-2vx4
  • PyPI/langflow
 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution 6 hours ago
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-2566
  • PyPI/langflow
 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint 13 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2569
  • PyPI/langflow
 Langflow vulnerable to injection 13 Jul
  • No fix available
  • Severity - 2.1 (Low)
PYSEC-2026-2568
  • PyPI/langflow
 Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint 13 Jul
  • Fix available
  • Severity - 2.1 (Low)
PYSEC-2026-2565
  • PyPI/langflow
 Langflow has an Information Leak through Incomplete API Key Redaction 13 Jul
  • No fix available
  • Severity - 2.0 (Low)
PYSEC-2026-2572
  • PyPI/langflow-base
 Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2570
  • PyPI/langflow-base
 Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 13 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-2567
  • PyPI/langflow
 Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 13 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-2571
  • PyPI/langflow-base
 Langflow Missing Authentication on Critical API Endpoints 13 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1525
  • PyPI/langflow
 Langflow affected by Remote Code Execution via validate_code() exec() 07 Jul
  • No fix available
  • Severity - 8.9 (High)
PYSEC-2026-1524
  • PyPI/langflow
 Langflow Missing Authentication on Critical API Endpoints 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1522
  • PyPI/langflow
 Langflow vulnerable to Server-Side Request Forgery 07 Jul
  • Fix available
  • Severity - 7.7 (High)
PYSEC-2026-1526
  • PyPI/langflow-base
 Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) 07 Jul
  • Fix available
  • Severity - 8.8 (High)
Load more...