CVE-2026-63417

The Logging Redactor Python library is vulnerable to the exposure of personally identifiable information (PII) in logs. Prior to version 0.0.7 , the library failed to redact sensitive data contained within the __str or __repr methods of non-primitive objects. This flaw allows sensitive values...

CVE-2026-101861 Langflow Code Execution via eval() in Component Input Schema

Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval vulnerability in schema.py that allows authenticated attackers to achieve code execution by placing a Python object with a malicious repr method into component input options lists. The eval sink is triggered when a...