https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:46:38.709324+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06683 bdu:2025-06683 2026-10-02T17:46:38.713344+00:00 bdu:2025-06683 https://cve.radiocsirt.org/vuln/cnvd-2025-21546 cnvd-2025-21546 2026-10-02T17:46:38.713374+00:00 cnvd-2025-21546 https://cve.radiocsirt.org/vuln/euvd-2026-337067 EUVD-2026-337067 2026-10-02T17:46:38.713388+00:00 EUVD-2026-337067 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3248 fkie_cve-2025-3248 2026-10-02T17:46:38.713400+00:00

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-rvqx-wpfh-mfx7 GHSA-rvqx-wpfh-mfx7 — Langflow Unauth RCE 2026-10-02T17:46:38.713425+00:00

Affected: PyPI: langflow, PyPI: langflow-base

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/pysec-2025-36 PYSEC-2025-36 2026-10-02T17:46:38.713448+00:00

Affected: PyPI: langflow

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.