Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2572
  • PyPI/langflow-base
 Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2570
  • PyPI/langflow-base
 Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 13 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-2571
  • PyPI/langflow-base
 Langflow Missing Authentication on Critical API Endpoints 13 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1526
  • PyPI/langflow-base
 Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-380
  • PyPI/langflow-base
 Langflow Unauth RCE 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-vvfc-fp59-m92g
  • PyPI/langflow-base
 Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API 20 Apr
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-8c4j-f57c-35cf
  • PyPI/langflow
  • PyPI/langflow-base
 Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check 27 Mar
  • Fix available
  • Severity - 8.7 (High)
GHSA-c5cp-vx83-jhqx
  • PyPI/langflow
  • PyPI/langflow-base
 Langflow Missing Authentication on Critical API Endpoints 02 Jan
  • Fix available
  • Severity - 8.8 (High)
GHSA-4gv9-mp8m-592r
  • PyPI/langflow
  • PyPI/langflow-base
 Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) 25 Aug 2025
  • Fix available
  • Severity - 8.8 (High)
GHSA-rvqx-wpfh-mfx7
  • PyPI/langflow
  • PyPI/langflow-base
 Langflow Unauth RCE 17 Jun 2025
  • Fix available
  • Severity - 9.3 (Critical)