Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/37250?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37250?format=api", "vulnerability_id": "VCID-rrva-95s5-kbcf", "summary": "Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 through 1.8.1 have a bypass of the patch for CVE-2025-68478 (External Control of File Name), leading to the root architectural issue within `LocalStorageService` remaining unresolved. Because the underlying storage layer lacks boundary containment checks, the system relies entirely on the HTTP-layer `ValidatedFileName` dependency. This defense-in-depth failure leaves the `POST /api/v2/files/` endpoint vulnerable to Arbitrary File Write. The multipart upload filename bypasses the path-parameter guard, allowing authenticated attackers to write files anywhere on the host system, leading to Remote Code Execution (RCE). Version 1.9.0 contains an updated fix.", "aliases": [ { "alias": "CVE-2026-33309" }, { "alias": "GHSA-g2j9-7rj2-gm6c" }, { "alias": "PYSEC-2026-79" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/48845?format=api", "purl": "pkg:pypi/langflow@1.9.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.9.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/44831?format=api", "purl": "pkg:pypi/langflow@1.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-wv26-29b9-vqgg" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/44832?format=api", "purl": "pkg:pypi/langflow@1.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/46604?format=api", "purl": "pkg:pypi/langflow@1.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/46605?format=api", "purl": "pkg:pypi/langflow@1.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.3.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/46606?format=api", "purl": "pkg:pypi/langflow@1.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/46607?format=api", "purl": "pkg:pypi/langflow@1.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/46608?format=api", "purl": "pkg:pypi/langflow@1.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.4.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/46609?format=api", "purl": "pkg:pypi/langflow@1.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/46610?format=api", "purl": "pkg:pypi/langflow@1.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.4.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/46611?format=api", "purl": "pkg:pypi/langflow@1.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.4.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/46612?format=api", "purl": "pkg:pypi/langflow@1.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/46613?format=api", "purl": "pkg:pypi/langflow@1.5.0.post1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.5.0.post1" }, { "url": "http://public2.vulnerablecode.io/api/packages/46614?format=api", "purl": "pkg:pypi/langflow@1.5.0.post2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.5.0.post2" }, { "url": "http://public2.vulnerablecode.io/api/packages/46615?format=api", "purl": "pkg:pypi/langflow@1.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/46616?format=api", "purl": "pkg:pypi/langflow@1.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/46617?format=api", "purl": "pkg:pypi/langflow@1.6.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/46618?format=api", "purl": "pkg:pypi/langflow@1.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/46619?format=api", "purl": "pkg:pypi/langflow@1.6.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/46620?format=api", "purl": "pkg:pypi/langflow@1.6.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/46621?format=api", "purl": "pkg:pypi/langflow@1.6.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/46622?format=api", "purl": "pkg:pypi/langflow@1.6.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/46623?format=api", "purl": "pkg:pypi/langflow@1.6.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/46624?format=api", "purl": "pkg:pypi/langflow@1.6.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/46625?format=api", "purl": "pkg:pypi/langflow@1.6.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-sbea-kkfu-akgb" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" }, { "vulnerability": "VCID-ysnc-jyxb-6qcy" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.6.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/46626?format=api", "purl": "pkg:pypi/langflow@1.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-ncvf-vzqr-uydz" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.7.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/48829?format=api", "purl": "pkg:pypi/langflow@1.7.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.7.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48830?format=api", "purl": "pkg:pypi/langflow@1.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48831?format=api", "purl": "pkg:pypi/langflow@1.7.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rc54-gw71-gyau" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.7.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/48832?format=api", "purl": "pkg:pypi/langflow@1.8.0rc0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc0" }, { "url": "http://public2.vulnerablecode.io/api/packages/48833?format=api", "purl": "pkg:pypi/langflow@1.8.0rc1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48834?format=api", "purl": "pkg:pypi/langflow@1.8.0rc2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ynd-c2hz-53hx" }, { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48835?format=api", "purl": "pkg:pypi/langflow@1.8.0rc3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc3" }, { "url": "http://public2.vulnerablecode.io/api/packages/48836?format=api", "purl": "pkg:pypi/langflow@1.8.0rc4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc4" }, { "url": "http://public2.vulnerablecode.io/api/packages/48837?format=api", "purl": "pkg:pypi/langflow@1.8.0rc5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc5" }, { "url": "http://public2.vulnerablecode.io/api/packages/48838?format=api", "purl": "pkg:pypi/langflow@1.8.0rc6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0rc6" }, { "url": "http://public2.vulnerablecode.io/api/packages/48839?format=api", "purl": "pkg:pypi/langflow@1.8.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/48840?format=api", "purl": "pkg:pypi/langflow@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/48841?format=api", "purl": "pkg:pypi/langflow@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/48842?format=api", "purl": "pkg:pypi/langflow@1.8.3rc0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.3rc0" }, { "url": "http://public2.vulnerablecode.io/api/packages/48843?format=api", "purl": "pkg:pypi/langflow@1.8.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/48844?format=api", "purl": "pkg:pypi/langflow@1.8.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4swq-hbjm-3ucd" }, { "vulnerability": "VCID-q4r1-xjfk-7bg9" }, { "vulnerability": "VCID-rrva-95s5-kbcf" }, { "vulnerability": "VCID-v5pc-pdm9-97g8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/langflow@1.8.4" } ], "references": [ { "reference_url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-g2j9-7rj2-gm6c", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], "url": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-g2j9-7rj2-gm6c" } ], "weaknesses": [], "exploits": [], "severity_range_score": "9.9 - 9.9", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rrva-95s5-kbcf" }