3078270 matches found
CVE-2026-9130 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the MemoryComponent that allows authenticated users to access chat history of other users via sessionid collision. The MemoryComponent.retrievemessages and storemessage methods filter on sessionid without...
MAL-2026-13365 Malicious code in @stageflight-testbed/a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1072a48305e4a3b7d7da10a09c3842a6976dc23f48c48b743e62e71d35912e36 index.ts defines an exported telemetry function that 1 POSTs process.env and process.env.NODEAUTHTOKEN to a base64-hidden endpoint decoding to...
Malicious code in @stageflight-testbed/a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1072a48305e4a3b7d7da10a09c3842a6976dc23f48c48b743e62e71d35912e36 index.ts defines an exported telemetry function that 1 POSTs process.env and process.env.NODEAUTHTOKEN to a base64-hidden endpoint decoding to...
CVE-2026-10547 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/flowid/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized...
CVE-2026-10547 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/flowid/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized...
EUVD-2026-53551
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/flowid/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized...
CVE-2026-10547
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated POST /api/v1/build/flowid/vertices endpoint, allowing an authenticated user to inject arbitrary graph data into a shared cache for any flow. This may result in cross-user cache pollution, unauthorized...
CVE-2026-10547
Summary (concrete details available) Langflow OSS versions 1.0.0–1.10.3 are affected by an ownership validation flaw in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint. An authenticated user can inject arbitrary graph data into a shared cache for any flow, enabling cross-user cache ...
CVE-2026-7869 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...
CVE-2026-7869 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...
MAL-2026-13367 Malicious code in clawtrl-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56c06b4b1f063e6827dc0d8e9a6e3d1b7395182c12188b4dc110b771c23386c The package's cli.js imports childprocess, https, and os, reads process.env and system information via os.tmpdir and related os APIs, spawns a bash...
Malicious code in clawtrl-wallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56c06b4b1f063e6827dc0d8e9a6e3d1b7395182c12188b4dc110b771c23386c The package's cli.js imports childprocess, https, and os, reads process.env and system information via os.tmpdir and related os APIs, spawns a bash...
MAL-2026-13366 Malicious code in @workoscalif/sudoku (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e5ade8ff253759644f519075c5e54fe1b927aa73d64624efaddc83af9098ba @workoscalif/[email protected] declares postinstall: node scripts/postinstall.mjs, which spawns vendor/gridgen-$process.platform-$process.arch on npm...
Malicious code in @workoscalif/sudoku (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e5ade8ff253759644f519075c5e54fe1b927aa73d64624efaddc83af9098ba @workoscalif/[email protected] declares postinstall: node scripts/postinstall.mjs, which spawns vendor/gridgen-$process.platform-$process.arch on npm...
Security Bulletin: Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
Summary Langflow OSS includes outbound network request functionality for provider validation and API request execution. Weaknesses in request destination validation and enforcement could allow authenticated users to induce requests to unintended internal or external network locations, which may...
Security Bulletin: Langflow OSS is affected by stored cross-site scripting in image file handling
Summary Langflow OSS serves user-provided image content as part of its file handling features. Improper handling of SVG image content could allow stored script execution when malicious image files are viewed, which may expose session information or permit actions in the context of another user...
Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access
Summary Langflow includes features for secret protection, environment access, and runtime configuration of workflow components. Weaknesses in cryptographic key handling, exposure of process environment values, and insufficient restriction of sensitive runtime configuration fields could allow...
Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...
Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...
Malicious code in solana-sniper-bot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1140920c05a1ce00ca8d35295fb927d1bbb2ca9fe2f8e7ab9f63f9391ca6476b During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category:...