PYSEC-2026-2565 Langflow has an Information Leak through Incomplete API Key Redaction

A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function removeapikeys/hasapiterms of the file src/backend/base/langflow/api/utils/core.py of the component Flow Using API. This manipulation causes unprotected storage of credentials. The attack can be initiated...

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in the removeapikeys and hasapiterms functions of the Flow Using API component. An attacker can access sensitive credential information by exploiting unprotected storage mechanisms remotely. Remediation Upgrade...

com.vaadin:vaadin (>=24.7.0, <=24.8.13) potentially affected by CVE-2025-15022 via com.vaadin:vaadin-spreadsheet-flow (>=24.7.0, <=24.8.13)

com.vaadin:vaadin-spreadsheet-flow MAVEN version =24.7.0, =24.7.0, =24.8.13 Source cves: CVE-2025-15022 Source advisory: GHSA-7WWV-79XW-RVVG...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.1, <=1.1.1), com.github.mcollovati.vertx:vertx-vaadin-flow (>=18.0.0, <=20.0.0) +19 more potentially affected by CVE-2021-33605 via com.vaadin:vaadin-checkbox-flow (>=18.0.0, <=20.0.5)

com.vaadin:vaadin-checkbox-flow MAVEN version =18.0.0, =1.0.1, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =20.0.5 and more Source cves: CVE-2021-33605 Source advisory: OSV:GHSA-QCC4-3RXF-GF4M...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.1, <=1.1.1), com.github.mcollovati.vertx:vertx-vaadin-flow (>=18.0.0, <=20.0.0) +19 more potentially affected by CVE-2021-33605 via com.vaadin:vaadin-checkbox-flow (>=18.0.0, <=20.0.5)

com.vaadin:vaadin-checkbox-flow MAVEN version =18.0.0, =1.0.1, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =18.0.0, =20.0.5 and more Source cves: CVE-2021-33605 Source advisory: MEND:CVE-2021-33605...

PT-2022-21128 · Ovs +3 · Ovs +3

Name of the Vulnerable Software and Affected Versions: ovs versions v0.90.0 through v2.5.0 Description: The issue is related to a heap buffer over-read in flow.c, caused by an unsafe comparison in the minimasks function. This could lead to access to an unmapped region of memory, resulting in...