13 matches found
airlock-llm (>=0.1.1, <=0.5.15), gllm-multimodal-binary (>=0.2.9b1, <=0.3.22) +7 more potentially affected by CVE-2026-84377 via litellm (1.95.0)
litellm PYPI version 1.95.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - airlock-llm =0.1.1, =0.2.9b1, =0.7.15, =0.1.0.8.11, =0.1.0.9 - pbi-agent 0.14.0 - pilottai-tools 0.1.0 - pr-agent 0.42.0 Source cves:...
IBM Langflow OSS Authentication Bypass Vulnerability
IBM Langflow OSS is the open-source version of Langflow that IBM officially integrates and promotes. IBM Langflow OSS has a vulnerability related to authentication bypass. This vulnerability arises when the MCP Composer endpoint is set to mcpcomposerEnabled=true default value and the project...
CVE-2026-8446
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...
CVE-2026-8446
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...
EUVD-2026-53465
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...
CVE-2026-8446
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol MCP composer endpoint when mcpcomposerenabled=true default and projects are configured with authtype=oauth...
CVE-2026-8446
Langflow OSS versions 1.0.0–1.10.3 contain an authentication bypass vulnerability in the Model Context Protocol (MCP) composer endpoint when mcp_composer_enabled=true (default) and projects use auth_type=oauth. The issue, tracked under CVE-2026-8446, enables bypassing authentication for the MCP c...
PT-2026-68254
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authentication bypass exists in the Model Context Protocol MCP composer endpoint. This occurs when the mcp composer enabled variable is set to true the default setting and projects...
beads-mcp (>=0.24.0, <=0.30.0), biocontext-kb (0.2.1) +13 more potentially affected by CVE-2025-64340 via fastmcp (2.13.1)
fastmcp PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.24.0, =0.11.0, =0.1.0.8.11, =0.5.0, =8.2.3, =0.1.4, =0.2.1 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...
beads-mcp (>=0.24.0, <=0.30.0), biocontext-kb (0.2.1) +13 more potentially affected by CVE-2026-27124 via fastmcp (2.13.1)
fastmcp PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.24.0, =0.11.0, =0.1.0.8.11, =0.5.0, =8.2.3, =0.1.4, =0.2.1 Source cves: CVE-2026-27124 Source advisory: OSV:PYSEC-2026-2476...
beads-mcp (>=0.24.0, <=0.30.0), biocontext-kb (0.2.1) +13 more potentially affected by CVE-2026-32871 via fastmcp (2.13.1)
fastmcp PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.24.0, =0.11.0, =0.1.0.8.11, =0.5.0, =8.2.3, =0.1.4, =0.2.1 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...
bigquery-mcp (>=0.1.4, <=0.1.5), cowmcpservice (0.1.0) +32 more potentially affected by CVE-2026-27124 via fastmcp (2.13.0)
fastmcp PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.4, =2.1.0, =2.1.0, =2.1.0, =0.2.7, =1.0.0, =1.0.0, =3.2.18, =0.12.0, =0.1.0.8, =0.6.2, =2.12.0, =2.15.0 and more Source cves:...
beads-mcp (>=0.24.0, <=0.30.0), biocontext-kb (0.2.1) +13 more potentially affected by CVE-2026-27124 via fastmcp (2.13.1)
fastmcp PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.24.0, =0.11.0, =0.1.0.8.11, =0.5.0, =8.2.3, =0.1.4, =0.2.1 Source cves: CVE-2026-27124 Source advisory: OSV:GHSA-RWW4-4W9C-7733...