Langflow: Unauthenticated RCE in Shareable Playgrounds

Summary The "Shareable Playground" or "Public Flows" in code contains a critical RCE vulnerability. Simply sharing a flow exposes the deployment to RCE risk by authenticated users. Tested on commit 2d67402b1dbaefcbce85a244d4a6cd5e4bda1cfe Details Shareable Playground feature works by enabling the...

DEBIAN-CVE-2026-12003

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

CVE-2026-12003

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

AZL-90182 CVE-2026-12003 affecting package python3 for versions less than 3.12.9-14

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

UBUNTU-CVE-2026-12003

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

CVE-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

CVE-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

CVE-2026-12003 CPython >3.11 Insecure Input Validation resulting in privilege escalation

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

CVE-2026-12003

Technical details are not publicly available in the provided documents. Monitor for updates.

PSF-2026-28

To allow builds of Python to be run from an in-tree layout rather than an installed file layout, the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local. When this landmark is found relative to VPATH relative to the executable, Python...

GHSA-JG6J-874M-WGJJ vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3276 vulnerabilities

Vulnerabilities for packages: python...

GHSA-6CJ7-V55X-8MWR vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-7774 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3276 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-7774 vulnerabilities

Vulnerabilities for packages: python...

GHSA-6CJ7-V55X-8MWR vulnerabilities

Vulnerabilities for packages: python...

GHSA-JG6J-874M-WGJJ vulnerabilities

Vulnerabilities for packages: python...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 5gasp-cli (>=0.1.0, <=0.4.0) +3279 more potentially affected by unknown CVE via html5lib (>=0.95.0, <=1.1.0)

html5lib PYPI version =0.95.0, =0.0.0, =0.1.0, =0.1.0, =0.10.0, =1.0.0, =3.30.15, =0.7.0, =0.2.0, =0.4.0, =0.4.11 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-HTML5LIB-17356104...

128autograder-ipython (1.0.0rc2), 3-04-2025-ttm (0.1.0) +7814 more potentially affected by unknown CVE via bleach (>=1.2.2, <=6.4.0)

bleach PYPI version =1.2.2, =0.5.0a0, =0.1.0, =0.1.0, =0.4.0, =0.1.0a1, =0.6.0, =1.0.3, =1.14.4, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =0.2.0 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-BLEACH-17356127...