Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2026/04/20 3:34 a.m.3 views

Langflow has an Information Leak through Incomplete API Key Redaction

A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function removeapikeys/hasapiterms of the file src/backend/base/langflow/api/utils/core.py of the component Flow Using API. This manipulation causes unprotected storage of credentials. The attack can be initiated...

5.1CVSS4.4AI score0.00011EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2026/02/11 11:16 p.m.6 views

CVE-2026-20646

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Tahoe 26.3. A malicious app may be able to read sensitive location information...

3.3CVSS0.00018EPSS
Exploits0References1
NVD
NVD
added 2025/12/15 12:15 p.m.3 views

CVE-2025-66388

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...

6.5CVSS0.00041EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 11:30 a.m.1 views

CVE-2025-66388 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this...

6.3AI score0.00041EPSS
Exploits0References2
OSV
OSV
added 2025/12/02 10:5 p.m.1 views

CLSA-2025-1764681009 squid: Fix of CVE-2025-62168

CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling...

10CVSS7.3AI score0.16244EPSS
Exploits1References1
CVE
CVE
added 2025/11/04 1:16 a.m.5 views

CVE-2025-43399

CVE-2025-43399 affects Apple platforms (iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1). The issue stems from improved redaction of sensitive information, with the fix shipped in the listed updates. Impact per provided sources: an app may be able to access protected user data. ...

7.5CVSS5.4AI score0.00044EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.2 views

PT-2025-44862

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 Description A flaw exists due to insufficient data redaction in logging mechanisms. This could allow an application to access sensitive user data. Recommendations Update to iOS version...

5.5CVSS6.2AI score0.00022EPSS
Exploits0References4
Rows per page
Query Builder