Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting whic…Check if you run itEPSS 0.65%Apr 8, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.68%Mar 27, 2026
- Critical9.3Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 1.82%Mar 27, 2026
- High8.8Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.76%Mar 27, 2026
- High7.0The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.Check if you run itEPSS 0.27%Mar 27, 2026
- Medium6.5The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.Check if you run itEPSS 0.42%Mar 27, 2026
- Medium6.3The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download im…Check if you run itEPSS 0.34%Mar 27, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 2.03%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.56%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 2.09%Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 1.05%Mar 24, 2026
- Medium6.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.54%Mar 20, 2026
- Critical9.3Langflow Code Injection VulnerabilityPatch nowKEVEPSS 24.75%Mar 19, 2026
- Critical9.8Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 2.55%Feb 26, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 63.01%Jan 22, 2026
- Critical9.4Langflow Origin Validation Error VulnerabilityPatch nowKEVEPSS 92.81%Dec 5, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
42 records · page 2 of 2
PreviousNext