Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/lfx@0.4.6rc0
purl pkg:pypi/lfx@0.4.6rc0
Next non-vulnerable version 1.10.3
Latest non-vulnerable version 1.10.3
Risk score 4.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-j8f7-x8jm-wmm4

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, …
1.10.3
Not vulnerable
PYSEC-2026-4241
Aliases:
CVE-2026-105697
GHSA-w794-rj3p-xv45
PYSEC-2026-4237
PYSEC-2026-4239
Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration ### Summary Before **Langflow 1.10.3**, the MCP …
1.10.3
Not vulnerable
This package is not known to fix any advisories.