packages

npm / PyPI / Rust / Java / Ruby / PHP + OSV

4 events on 2026-06-19role: thematic7d fetch windowcadence: dailyaccess: keyless

Extracts: package, version, advisory · metadata plus selected structured payload

Retention: D1 event history; source document retained when the adapter emits one.

Access basis: Public endpoint; no project credential required.

Last ingested: 2026-08-25 · run status: success with data

2026-06-19OSV advisory: langflow GHSA-ccv6-r384-xp75
Aliases: CVE-2026-55447 Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-qwqc-p3q8-wcg9
Aliases: CVE-2026-55446, PYSEC-2026-223 Langflow: Unauthenticated DoS through multipart form boundary file upload
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-7hw8-6q6r-4276
Aliases: CVE-2026-55423, PYSEC-2026-222 Langflow: Logout button does not clear session
LANGFLOWosv:pypi:langflow
2026-06-19OSV advisory: langflow GHSA-qrpv-q767-xqq2
Aliases: CVE-2026-55255, PYSEC-2026-221 Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
LANGFLOWosv:pypi:langflow