Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/cod…

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prio…

Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vu…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables accoun…

Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a …

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Exec…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow is a tool for building and deploying AI-powered agents and workflows. An unauthenticat…

The 'POST /api/v2/files' endpoint does not sanitize the 'filename' parameter from the multipart…

Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows rem…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow is a tool for building and deploying AI-powered agents and workflows. Versions 1.2.0 t…

langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the co…

langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the …

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "…

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This…

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this …

Langflow PythonFunction Code Injection Remote Code Execution Vulnerability. This vulnerability …

IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validati…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, …

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions 1.0.…

IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute …

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege esca…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prio…

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version…

The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read…

IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensit…

IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resour…

The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication o…

IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transacti…

The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+…