langflow
A Python package with a built-in web application
Security Advisories for langflow in pypi
Critical
about 2 months ago
Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
pypi
langflow
High
about 2 months ago
Langflow: Unauthenticated DoS through multipart form boundary file upload
pypi
langflow
High
about 2 months ago
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
pypi
langflow
Critical
2 months ago
Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak
pypi
langflow
Moderate
2 months ago
Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
pypi
langflow
Moderate
2 months ago
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
pypi
langflow
High
2 months ago
Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
pypi
langflow
Low
4 months ago
Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint
pypi
langflow
Low
4 months ago
Langflow has an Information Leak through Incomplete API Key Redaction
pypi
langflow
High
5 months ago
Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
pypi
langflow-base, langflow
Critical
5 months ago
Langflow has Authenticated Code Execution in Agentic Assistant Validation
pypi
langflow
High
5 months ago
langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
pypi
langflow
High
5 months ago
Langflow is Missing Ownership Verification in API Key Deletion (IDOR)
pypi
langflow
Critical
5 months ago
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
pypi
langflow
High
7 months ago
Langflow affected by Remote Code Execution via validate_code() exec()
pypi
langflow
High
8 months ago
Langflow Missing Authentication on Critical API Endpoints
pypi
langflow, langflow-base
High
12 months ago
Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
pypi
langflow-base, langflow