https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:22:22.680857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348760 EUVD-2026-348760 2026-10-04T02:22:22.683612+00:00 EUVD-2026-348760 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8470 fkie_cve-2026-8470 2026-10-04T02:22:22.683644+00:00

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for identical seeds, allowing attackers to reproduce encryption keys and decrypt stored API keys and authentication tokens.

 https://cve.radiocsirt.org/vuln/ghsa-8jj7-whc4-r6j5 GHSA-8jj7-whc4-r6j5 2026-10-04T02:22:22.683678+00:00

IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for generating Fernet encryption keys from user secrets under 32 characters. The deterministic Mersenne Twister PRNG produces identical keys for identical seeds, allowing attackers to reproduce encryption keys and decrypt stored API keys and authentication tokens.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2675 WID-SEC-W-2026-2675 — IBM Langflow Desktop: Mehrere Schwachstellen 2026-10-04T02:22:22.683696+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Langflow Desktop ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.