Lucene search
K

79 matches found

OSV
OSV
added 2026/01/23 4:16 a.m.4 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.7AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 3:29 a.m.2 views

CVE-2026-0772 Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.6AI score0.01532EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:29 a.m.3 views

CVE-2026-0772

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS6.4AI score0.01532EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/01/23 3:29 a.m.9 views

CVE-2026-0772

CVE-2026-0772 is a Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution vulnerability. The flaw exists in the disk cache service and stems from insufficient validation of user-supplied data, enabling deserialization of untrusted data and code execution in the service accoun...

7.5CVSS6.6AI score0.01532EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2026/01/23 3:29 a.m.27 views

CVE-2026-0772 Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk...

7.5CVSS0.01532EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/23 12:4 a.m.1 views

CVE-2026-24137 sigstore legacy TUF client allows for arbitrary file writes with target cache path traversal

sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client pkg/tuf/client.go supports caching target files to disk. It constructs a filesystem path by joining a cache base directory with a target name sourced from...

5.8CVSS5.7AI score0.00016EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/23 12:4 a.m.3 views

CVE-2026-24137

sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client pkg/tuf/client.go supports caching target files to disk. It constructs a filesystem path by joining a cache base directory with a target name sourced from...

5.8CVSS5.5AI score0.00016EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.2 views

Langflow code issues and vulnerabilities

Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Langflow has code-related vulnerabilities; these vulnerabilities stem from the lack of validation for data provided by the disk caching service, which may lead to the...

7.5CVSS7.5AI score0.01532EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2026/01/09 12:0 a.m.2 views

(0Day) Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The specific flaw exists within the disk cache service. The issue results from the lack of proper validation of user-supplied data,...

7.5CVSS7.7AI score0.01532EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.4 views

PT-2026-2002

Name of the Vulnerable Software and Affected Versions Langflow affected versions not specified Description A flaw exists in the disk cache service of Langflow that allows remote attackers to execute arbitrary code on affected installations. Authentication is required for exploitation. The issue...

7.5CVSS8.1AI score0.01532EPSS
Exploits1References2
Oracle linux
Oracle linux
added 2025/11/04 12:0 a.m.8 views

sssd security update

2.9.4-5.0.2.3 - Missing ntohs to service port Orabug: 37389651 - Restore default debug level for ssscache Orabug: 32810448 2.9.4-5.3 - Resolves: RHEL-112455 - p11child currently has an infinite timeout rhel-8.10.z - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration...

8.8CVSS7.2AI score0.00046EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-6085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML...

8.8CVSS8.6AI score0.02399EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-6086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote...

8.8CVSS8.7AI score0.02399EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/03/05 6:4 p.m.4 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/02/12 8:44 a.m.1 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/02/12 8:40 a.m.4 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/02/12 8:38 a.m.3 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/01/24 12:28 p.m.2 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/01/08 8:23 a.m.1 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/12/06 10:2 a.m.3 views

squid: DoS against HTTP and HTTPS

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk...

7.5CVSS5.7AI score0.01879EPSS
Exploits0References5
Rows per page
Query Builder