Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Langflow: Logout button does not clear session | Medium Risk 6.1 | 3 months ago | 3 days ago |
|
|
Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read | Medium Risk 6.1 | 3 months ago | 2 months ago |
|
|
Langflow: Unauthenticated RCE in Shareable Playgrounds | Critical 9.6 | 3 months ago | 2 months ago |
|
|
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint | Medium Risk 6.5 | 3 months ago | 2 months ago |
|
|
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints | High Risk 8.8 | 3 months ago | 2 months ago |
|
|
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | High Risk 8.0 | 6 months ago | 2 months ago |
|
|
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | High Risk 8.0 | 6 months ago | 2 months ago |
|
|
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | Unknown | 2 months ago | 2 months ago |
|
|
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check | Unknown | 2 months ago | 2 months ago |
|
|
Langflow vulnerable to injection | Medium Risk 6.3 | 5 months ago | 2 months ago |
|
|
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API | High Risk 7.3 | 5 months ago | 2 months ago |
|
|
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint | Medium Risk 4.3 | 5 months ago | 2 months ago |
|
|
Langflow Missing Authentication on Critical API Endpoints | High Risk 8.0 | 8 months ago | 2 months ago |
|
|
Langflow Missing Authentication on Critical API Endpoints | High Risk 8.0 | 8 months ago | 2 months ago |
|
|
Langflow Missing Authentication on Critical API Endpoints | Unknown | 2 months ago | 2 months ago |
|
|
Langflow Missing Authentication on Critical API Endpoints | Unknown | 2 months ago | 2 months ago |
|
|
Langflow has an Information Leak through Incomplete API Key Redaction | Low Risk 2.7 | 5 months ago | 2 months ago |
|
|
Langflow vulnerable to injection | Medium Risk 6.3 | 2 months ago | 2 months ago |
|
|
Langflow has an Information Leak through Incomplete API Key Redaction | Low Risk 2.7 | 2 months ago | 2 months ago |
|
|
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint | Medium Risk 6.5 | 2 months ago | 2 months ago |
|
|
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint | Medium Risk 4.3 | 2 months ago | 2 months ago |
|
|
Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API | High Risk 7.3 | 2 months ago | 2 months ago |
|
|
Langflow Knowledge Bases API is Vulnerable to Path Traversal | Critical 9.6 | 3 months ago | 2 months ago |
|
|
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint | Critical 9.8 | 3 months ago | 2 months ago |
|
|
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) | High Risk 8.8 | 1 year ago | 2 months ago |
|
|
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) | High Risk 8.8 | 1 year ago | 2 months ago |
|
|
No summary available | High Risk 8.8 | 1 year ago | 2 months ago |
|
|
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE) | High Risk 8.8 | 2 months ago | 2 months ago |
|
|
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow | High Risk 8.4 | 3 months ago | 2 months ago |
|
|
Langflow vulnerable to remote code execution | Critical 9.8 | 1 year ago | 2 months ago |
|
|
Inefficient Regular Expression Complexity in langflow | Low Risk 3.5 | 2 years ago | 2 months ago |
|
|
Langflow affected by Remote Code Execution via validate_code() exec() | High Risk 8.0 | 8 months ago | 2 months ago |
|
|
Langflow vulnerable to Server-Side Request Forgery | High Risk 7.7 | 9 months ago | 2 months ago |
|
|
Langflow vulnerable to remote code execution | Critical 9.8 | 2 months ago | 2 months ago |
|
|
Inefficient Regular Expression Complexity in langflow | Low Risk 3.5 | 2 months ago | 2 months ago |
|
|
Langflow vulnerable to Server-Side Request Forgery | High Risk 7.7 | 2 months ago | 2 months ago |
|
|
Langflow affected by Remote Code Execution via validate_code() exec() | Unknown | 2 months ago | 2 months ago |
|
|
Langflow has Remote Code Execution in CSV Agent | Critical 9.8 | 3 months ago | 2 months ago |
|
|
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit | Critical 9.6 | 3 months ago | 2 months ago |
|
|
Langflow Unauth RCE | Unknown | 3 months ago | 2 months ago |
|
|
Langflow has Remote Code Execution in CSV Agent | Critical 9.8 | 7 months ago | 3 months ago |
|
|
Langflow Knowledge Bases API is Vulnerable to Path Traversal | Critical 9.6 | 4 months ago | 3 months ago |
|
|
Langflow Unauth RCE | Critical 9.5 | 1 year ago | 3 months ago |
|
|
Langflow Unauth RCE | Critical 9.5 | 1 year ago | 3 months ago |
|
|
No summary available | Critical 9.8 | 1 year ago | 3 months ago |
|
|
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit | Critical 9.6 | 3 months ago | 3 months ago |
|
|
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint | Critical 9.8 | 6 months ago | 3 months ago |
|
|
No summary available | High Risk 8.8 | 3 months ago | 3 months ago |
|
|
No summary available | Critical 9.6 | 3 months ago | 3 months ago |
|
|
No summary available | Medium Risk 6.1 | 3 months ago | 3 months ago |
Page 1