60223 matches found
CVE-2026-9201
IBM Langflow OSS 1.0.0–1.10.3 is affected by an authenticated arbitrary code execution vulnerability in the custom component validation mechanism. The hardening mode that restricts execution to trusted templates validates component code using a truncated SHA-256 digest, causing only a portion of ...
EUVD-2026-53572
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...
CVE-2026-9201
IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...
Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...
MAL-2026-13362 Malicious code in mnemonic-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6599d6208d71e0e809661e86bf5641e6e7b871cd6f01a54abf22215b8a88ef11 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...
ROOT-APP-PYPI-CVE-2025-24793 CVE-2025-24793 in snowflake-connector-python - Patched by Root
Root has patched CVE-2025-24793 in the snowflake-connector-python package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in python-dotenv - Patched by Root
Root has patched CVE-2026-28684 in the python-dotenv package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root
Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69277 CVE-2025-69277 in PyNaCl - Patched by Root
Root has patched CVE-2025-69277 in the PyNaCl package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-27516 CVE-2025-27516 in Jinja2 - Patched by Root
Root has patched CVE-2025-27516 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-56201 CVE-2024-56201 in Jinja2 - Patched by Root
Root has patched CVE-2024-56201 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-34064 CVE-2024-34064 in Jinja2 - Patched by Root
Root has patched CVE-2024-34064 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-6176 CVE-2025-6176 in Brotli - Patched by Root
Root has patched CVE-2025-6176 in the Brotli package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-3276 CVE-2026-3276 in python3.11 - Patched by Root
Root has patched CVE-2026-3276 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-8328 CVE-2026-8328 in python3.11 - Patched by Root
Root has patched CVE-2026-8328 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-7210 CVE-2026-7210 in python3.11 - Patched by Root
Root has patched CVE-2026-7210 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3.11 - Patched by Root
Root has patched CVE-2026-3644 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-7774 CVE-2026-7774 in python3.11 - Patched by Root
Root has patched CVE-2026-7774 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...