packages

The React Framework

The React Framework

Library to easily interface with LLM API providers

The official Python library for the openai API

A Python package with a built-in web application

The React Framework

The official Python library for the anthropic API

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

Library to easily interface with LLM API providers

Library to easily interface with LLM API providers

The React Framework

The React Framework

Library to easily interface with LLM API providers

A Python package with a built-in web application

Library to easily interface with LLM API providers

The React Framework

A Python package with a built-in web application

Library to easily interface with LLM API providers

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

Aliases: CVE-2026-55450, GHSA-x223-p2gf-v735 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network acc

Aliases: CVE-2026-55446, GHSA-qwqc-p3q8-wcg9 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v1/files/upload/ request without any authentication token/cookies and abuse a very long multipart form boundary

Aliases: CVE-2026-55423, GHSA-7hw8-6q6r-4276 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.7.0, the logout button does not clear the session. The previous user stays logged in unless another user explicitly logs in. This vulnerability i

Aliases: CVE-2026-55255, GHSA-qrpv-q767-xqq2 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow

Aliases: CVE-2026-48520, GHSA-rcjh-r59h-gq37 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in code) contains a potential arbitrary file-read vulnerability, depending on the exact flow

Aliases: CVE-2026-48519, GHSA-v5ff-9q35-q26f Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in code) contains a critical RCE vulnerability. Shareable Playground feature works by enabling

Aliases: CVE-2026-33760, GHSA-9c59-2mvc-vfr8 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow's /api/v1/monitor router exposes 7 endpoints that perform read, write, and delete operations on user-owned resources — messages, se

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

The React Framework

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

Hooks for managing, caching and syncing asynchronous and remote data in React

A Python package with a built-in web application

The React Framework

A Python package with a built-in web application

The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.

A Python package with a built-in web application

A Python package with a built-in web application

Aliases: CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Aliases: CVE-2026-55446, PYSEC-2026-223 Langflow: Unauthenticated DoS through multipart form boundary file upload

Aliases: CVE-2026-55423, PYSEC-2026-222 Langflow: Logout button does not clear session

Aliases: CVE-2026-55255, PYSEC-2026-221 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

Aliases: CVE-2026-55450, PYSEC-2026-224 Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

Aliases: CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection

Aliases: CVE-2026-48520, PYSEC-2026-244 Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read

Aliases: CVE-2026-48519, PYSEC-2026-243 Langflow: Unauthenticated RCE in Shareable Playgrounds

Aliases: CVE-2026-42867 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint

Aliases: CVE-2026-33760, PYSEC-2026-242 Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints

The React Framework

Library to easily interface with LLM API providers

Library to easily interface with LLM API providers