packages

npm / PyPI / Rust / Java / Ruby / PHP + OSV

4 events on 2026-06-19role: thematic7d historyaccess: keyless

Keeps: package, version, advisory

2026-06-19OSV advisory: langflow GHSA-ccv6-r384-xp75
Aliases: CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-qwqc-p3q8-wcg9
Aliases: CVE-2026-55446, PYSEC-2026-223 Langflow: Unauthenticated DoS through multipart form boundary file upload
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-7hw8-6q6r-4276
Aliases: CVE-2026-55423, PYSEC-2026-222 Langflow: Logout button does not clear session
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-qrpv-q767-xqq2
Aliases: CVE-2026-55255, PYSEC-2026-221 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
LANGFLOWosv:pypi:langflow