Search for packages
| purl | pkg:pypi/langflow-base@0.8.3rc0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-2572
Aliases: CVE-2026-6596 GHSA-vvfc-fp59-m92g |
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API A security flaw has been discovered … |
Vulnerable |
|
GHSA-j8f7-x8jm-wmm4
|
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, … |
Not vulnerable |
|
PYSEC-2026-4238
Aliases: CVE-2026-105698 GHSA-gh98-4phw-6fmw PYSEC-2026-4234 |
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints ### Summary Before **Langflow 1.10.1**, two deprecated but … |
Vulnerable |
|
PYSEC-2026-4239
Aliases: CVE-2026-105697 GHSA-w794-rj3p-xv45 PYSEC-2026-4237 PYSEC-2026-4241 |
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration ### Summary Before **Langflow 1.10.3**, the MCP … |
Not vulnerable |