117637 matches found
CVE-2026-13446 Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...
CVE-2026-45309
creationtimestamp| type| source ---|---|--- 2026-07-17 20:39:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqumbgbfoa27...
CVE-2026-48045
creationtimestamp| type| source ---|---|--- 2026-07-17 20:34:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulyhoe352b...
CVE-2026-53712
creationtimestamp| type| source ---|---|--- 2026-07-17 20:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulpjadju2x...
CVE-2026-8635
creationtimestamp| type| source ---|---|--- 2026-07-17 20:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulmgjig62e 2026-07-17 22:26:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqusa6knt62e 2026-07-18 11:01:02+00:00| seen|...
CVE-2026-8476
creationtimestamp| type| source ---|---|--- 2026-07-17 20:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquliubjcs2y 2026-07-17 22:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqurxa5cqh2o 2026-07-18 14:01:33+00:00| seen|...
CVE-2026-48487
creationtimestamp| type| source ---|---|--- 2026-07-17 20:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqulgkrrgf22...
CVE-2026-15091
creationtimestamp| type| source ---|---|--- 2026-07-17 20:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulfbhtkk2j 2026-07-17 21:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquq7kpqwz2g 2026-07-18 17:01:21+00:00| seen|...
CVE-2026-60137
creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbqes2k2a 2026-07-17 21:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquqd5kxgq2i 2026-07-17 22:19:07+00:00| seen|...
CVE-2026-8481
creationtimestamp| type| source ---|---|--- 2026-07-17 20:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulbowbpo2v 2026-07-17 22:41:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqut2zsykr24 2026-07-18 14:01:40+00:00| seen|...
CVE-2026-3031
creationtimestamp| type| source ---|---|--- 2026-07-17 20:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqul647dyg2v...
CVE-2026-54163
secureheaders manages application of security headers with many safe defaults. Prior to 7.3.0, secureheaders builds the Content-Security-Policy value by stitching directives with ; separators, and buildsandboxlistdirective, buildmediatypelistdirective, and buildreporttodirective interpolate...
CVE-2026-7754
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery SSRF due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism...
CVE-2026-50289
systeminformation is a System and OS information library for node.js. Prior to 5.31.7, networkInterfaces on Linux is vulnerable to OS command injection through the Debian/Ubuntu interfaces5 source directive because lib/network.js checkLinuxDCHPInterfaces reads /etc/network/interfaces, extracts a...
CVE-2026-7754
creationtimestamp| type| source ---|---|--- 2026-07-17 20:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqukdh7xx72x 2026-07-18 15:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjtisry42e...
CVE-2026-38752
creationtimestamp| type| source ---|---|--- 2026-07-17 20:03:27+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mquk7oiurt2i...
CVE-2026-47184
creationtimestamp| type| source ---|---|--- 2026-07-17 20:00:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquk3hsae622...
EUVD-2026-45306
IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input in the Python Interpreter component...