Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/langflow-base@0.9.3
purl pkg:pypi/langflow-base@0.9.3
Next non-vulnerable version 0.10.3
Latest non-vulnerable version 0.10.3
Risk score 4.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-j8f7-x8jm-wmm4

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, …
0.10.3
Not vulnerable
PYSEC-2026-4238
Aliases:
CVE-2026-105698
GHSA-gh98-4phw-6fmw
PYSEC-2026-4234
Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints ### Summary Before **Langflow 1.10.1**, two deprecated but …
0.10.1
Vulnerable
PYSEC-2026-4239
Aliases:
CVE-2026-105697
GHSA-w794-rj3p-xv45
PYSEC-2026-4237
PYSEC-2026-4241
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration ### Summary Before **Langflow 1.10.3**, the MCP …
0.10.3
Not vulnerable
This package is not known to fix any advisories.