Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:46:14 +0000 bdu:2025-06683 https://cve.radiocsirt.org/vuln/bdu:2025-06683 bdu:2025-06683 https://cve.radiocsirt.org/vuln/bdu:2025-06683 cnvd-2025-21546 https://cve.radiocsirt.org/vuln/cnvd-2025-21546 cnvd-2025-21546 https://cve.radiocsirt.org/vuln/cnvd-2025-21546 EUVD-2026-337067 https://cve.radiocsirt.org/vuln/euvd-2026-337067 EUVD-2026-337067 https://cve.radiocsirt.org/vuln/euvd-2026-337067 fkie_cve-2025-3248 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3248 <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3248 GHSA-rvqx-wpfh-mfx7 — Langflow Unauth RCE https://cve.radiocsirt.org/vuln/ghsa-rvqx-wpfh-mfx7 <p><strong>Affected:</strong> PyPI: langflow, PyPI: langflow-base</p> <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> <p><strong>Affected:</strong> PyPI: langflow, PyPI: langflow-base</p> <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-rvqx-wpfh-mfx7 PYSEC-2025-36 https://cve.radiocsirt.org/vuln/pysec-2025-36 <p><strong>Affected:</strong> PyPI: langflow</p> <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> <p><strong>Affected:</strong> PyPI: langflow</p> <p>Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/pysec-2025-36