packages

npm / PyPI / Rust / Java / Ruby / PHP + OSV

5 events on 2026-06-16role: thematic7d fetch windowcadence: dailyaccess: keyless

Extracts: package, version, advisory · metadata plus selected structured payload

Retention: D1 event history; source document retained when the adapter emits one.

Access basis: Public endpoint; no project credential required.

Last ingested: 2026-08-26 · run status: success with data

2026-06-16OSV advisory: litellm GHSA-4xpc-pv4p-pm3w
Aliases: CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection
LITELLMosv:pypi:litellm
2026-06-16OSV advisory: langflow GHSA-rcjh-r59h-gq37
Aliases: CVE-2026-48520, PYSEC-2026-244 Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
LANGFLOWosv:pypi:langflow
2026-06-16OSV advisory: langflow GHSA-v5ff-9q35-q26f
Aliases: CVE-2026-48519, PYSEC-2026-243 Langflow: Unauthenticated RCE in Shareable Playgrounds
LANGFLOWosv:pypi:langflow
2026-06-16OSV advisory: langflow GHSA-79ph-745m-6wxq
Aliases: CVE-2026-42867 Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
LANGFLOWosv:pypi:langflow
2026-06-16OSV advisory: langflow GHSA-9c59-2mvc-vfr8
Aliases: CVE-2026-33760, PYSEC-2026-242 Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
LANGFLOWosv:pypi:langflow