UNIX Symbolic Link (Symlink) Following

Overview lfx is a lfx is a command-line tool for running Langflow workflows. It provides two main commands: serve and run. Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via the BaseFileComponent.unpackbundle function. An attacker can access arbitrary fil...

CVE-2008-6556

creationtimestamp| type| source ---|---|--- 2026-06-19 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moo5f62rif26...

CVE-2023-54357

creationtimestamp| type| source ---|---|--- 2026-06-19 19:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo44kbjyj2m...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the CRI checkpoint restore plugin due to improper validation of symlinked paths. An attacker can access arbitrary files on the host by crafting a malicious checkpoint image and leveraging the...

CVE-2009-3473

creationtimestamp| type| source ---|---|--- 2026-06-19 18:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monyeb5jl52i...

CVE-2026-56209

creationtimestamp| type| source ---|---|--- 2026-06-19 18:34:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mony7lyhgq2h...

CVE-2017-20279

creationtimestamp| type| source ---|---|--- 2026-06-19 18:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwkj5zr42h...

CVE-2017-20280

creationtimestamp| type| source ---|---|--- 2026-06-19 18:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monwcjl27r2h...

CVE-2008-1841

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/482f9788-fce3-405e-a7e0-d06a21629e87 2026-06-23 14:04:17+00:00| exploited|...

CVE-2011-1968

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:38+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d867e096-bc79-4b31-83b1-ca77edbd42fe 2026-06-23 14:04:10+00:00| exploited|...

CVE-2009-4476

creationtimestamp| type| source ---|---|--- 2026-06-19 16:37:16+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monrnmqu5u2n...

CVE-2025-71326

creationtimestamp| type| source ---|---|--- 2026-06-19 16:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monqf2ua4u24 2026-06-22 09:06:59+00:00| seen| https://www.acn.gov.it/portale/w/avast-disponibile-poc-pubblico-per-la-cve-2025-71326...

CVE-2026-47211

creationtimestamp| type| source ---|---|--- 2026-06-19 16:11:36+00:00| seen| https://gist.github.com/alon710/27a1a02d7c391b1b2590b0cf7da6fc5e 2026-08-03 22:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva...

CVE-2020-37252

creationtimestamp| type| source ---|---|--- 2026-06-19 15:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monpk7kr4u2z...

CVE-2016-20095

creationtimestamp| type| source ---|---|--- 2026-06-19 15:45:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monoqjukp72g...

GHSA-VCV2-R9JH-99M5

creationtimestamp| type| source ---|---|--- 2026-06-19 15:42:13+00:00| seen| https://gist.github.com/alon710/fca46c1ce608de0751f3ec7bdc815dc8...

CVE-2026-49872

creationtimestamp| type| source ---|---|--- 2026-06-19 15:37:17+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monocokqpd2x...

CVE-2026-49231

creationtimestamp| type| source ---|---|--- 2026-06-19 15:32:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mono2yycz62k...

CVE-2020-37254

creationtimestamp| type| source ---|---|--- 2026-06-19 15:32:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monnzl4dik2q...

CVE-2020-37250

creationtimestamp| type| source ---|---|--- 2026-06-19 15:29:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monnv3o7qu2g...