Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductLangflow Oss (76f13290-9e1a-5502-bd5b-80373b8c1904)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18894 vulnerable 2026-11-03 10:17:40.552159 Langflow OSS is affected by multiple vulnerabilities
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are restricted to server-trusted component code.
Published: 2026-10-29T15:19:09.963Z
Updated: 2026-10-29T19:38:15.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-93680 vulnerable 2026-11-03 10:16:30.491172 Langflow OSS is affected by multiple vulnerabilities
CRITICAL (9.8)
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication.
Published: 2026-10-29T15:18:37.766Z
Updated: 2026-10-30T17:18:26.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104309 vulnerable 2026-11-03 10:16:19.442701 Langflow OSS is affected by multiple vulnerabilities
MEDIUM (6.5)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
Published: 2026-10-29T15:17:56.851Z
Updated: 2026-10-29T19:37:22.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104324 vulnerable 2026-11-03 10:16:19.429013 Langflow OSS is affected by multiple vulnerabilities
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deserialization of untrusted data.
Published: 2026-10-29T15:17:01.776Z
Updated: 2026-10-30T17:18:27.074Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104328 vulnerable 2026-11-03 10:16:19.422631 Langflow OSS is affected by multiple vulnerabilities
HIGH (8.8)
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Published: 2026-10-29T15:16:53.198Z
Updated: 2026-10-30T03:56:27.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104339 vulnerable 2026-11-03 10:16:19.362602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104314 vulnerable 2026-11-03 10:16:19.334205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104316 vulnerable 2026-11-03 10:16:19.188145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-104317 vulnerable 2026-11-03 10:16:19.027500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90991 vulnerable 2026-11-03 10:16:17.770529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110190 vulnerable 2026-11-03 10:16:00.965292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110186 vulnerable 2026-11-03 10:16:00.926287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110196 vulnerable 2026-11-03 10:16:00.850992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110309 vulnerable 2026-11-03 10:16:00.820220 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110244 vulnerable 2026-11-03 10:16:00.804620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-110193 vulnerable 2026-11-03 10:16:00.486345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107326 vulnerable 2026-11-03 10:15:59.430127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107327 vulnerable 2026-11-03 10:15:59.253680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107329 vulnerable 2026-11-03 10:15:59.093520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107366 vulnerable 2026-11-03 10:15:59.058193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-107328 vulnerable 2026-11-03 10:15:59.009641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-103092 vulnerable 2026-11-03 10:15:49.447898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-101288 vulnerable 2026-11-03 10:15:22.454929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19303 vulnerable 2026-09-16 04:34:15.588131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7658 vulnerable 2026-09-16 04:34:10.807047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7646 vulnerable 2026-09-16 04:34:10.198000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7869 vulnerable 2026-09-16 04:34:10.077048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7657 vulnerable 2026-09-16 04:34:09.822252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78569 vulnerable 2026-09-16 04:33:44.789752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78571 vulnerable 2026-09-16 04:33:44.771483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78575 vulnerable 2026-09-16 04:33:44.692340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-79725 vulnerable 2026-09-16 04:33:29.069688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-79724 vulnerable 2026-09-16 04:33:29.007653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-79742 vulnerable 2026-09-16 04:33:28.998701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-79723 vulnerable 2026-09-16 04:33:28.953918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84889 vulnerable 2026-09-16 04:33:10.345659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-85025 vulnerable 2026-09-16 04:33:08.071661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17628 vulnerable 2026-09-16 04:33:04.087439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17630 vulnerable 2026-09-16 04:33:03.988802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17624 vulnerable 2026-09-16 04:33:03.795198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17621 vulnerable 2026-09-16 04:33:03.651939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17625 vulnerable 2026-09-16 04:33:03.630743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17623 vulnerable 2026-09-16 04:33:03.269231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17633 vulnerable 2026-09-16 04:33:03.062321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17632 vulnerable 2026-09-16 04:33:02.851651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-17626 vulnerable 2026-09-16 04:33:02.644753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9081 vulnerable 2026-09-16 04:33:02.532203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9130 vulnerable 2026-09-16 04:33:02.409969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9196 vulnerable 2026-09-16 04:33:02.363518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9138 vulnerable 2026-09-16 04:33:02.281280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9077 vulnerable 2026-09-16 04:33:02.017888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9205 vulnerable 2026-09-16 04:33:01.979776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9201 vulnerable 2026-09-16 04:33:01.910495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9225 vulnerable 2026-09-16 04:33:01.739023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8470 vulnerable 2026-09-16 04:32:58.339792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8182 vulnerable 2026-09-16 04:32:58.273904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8478 vulnerable 2026-09-16 04:32:58.174143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8183 vulnerable 2026-09-16 04:32:58.134592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8446 vulnerable 2026-09-16 04:32:57.589061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12767 vulnerable 2026-09-16 04:32:51.712536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12940 vulnerable 2026-09-16 04:32:51.691021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12944 vulnerable 2026-09-16 04:32:51.642608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12763 vulnerable 2026-09-16 04:32:51.614230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12766 vulnerable 2026-09-16 04:32:51.382366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12945 vulnerable 2026-09-16 04:32:51.341769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12765 vulnerable 2026-09-16 04:32:50.945434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12946 vulnerable 2026-09-16 04:32:50.899273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13442 vulnerable 2026-09-16 04:32:50.455700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13435 vulnerable 2026-09-16 04:32:50.276569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13444 vulnerable 2026-09-16 04:32:49.950314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81213 vulnerable 2026-09-16 04:32:48.493282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81941 vulnerable 2026-09-16 04:32:48.477580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81265 vulnerable 2026-09-16 04:32:48.465353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81268 vulnerable 2026-09-16 04:32:48.258728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81940 vulnerable 2026-09-16 04:32:48.254768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81204 vulnerable 2026-09-16 04:32:48.223355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81211 vulnerable 2026-09-16 04:32:48.010097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76059 vulnerable 2026-09-16 04:32:47.860865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10128 vulnerable 2026-09-16 04:32:43.232458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10700 vulnerable 2026-09-16 04:32:43.223534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10547 vulnerable 2026-09-16 04:32:43.096478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9202 vulnerable 2026-07-29 01:09:06.786688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9198 vulnerable 2026-07-29 01:09:06.783404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9135 vulnerable 2026-07-29 01:09:06.708193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9103 vulnerable 2026-07-29 01:09:06.671048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8859 vulnerable 2026-07-29 01:09:06.346347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8635 vulnerable 2026-07-29 01:09:06.062770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8505 vulnerable 2026-07-29 01:09:05.936587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8481 vulnerable 2026-07-29 01:09:05.908132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8476 vulnerable 2026-07-29 01:09:05.904150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8056 vulnerable 2026-07-29 01:09:05.481883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7874 vulnerable 2026-07-29 01:09:05.309596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7873 vulnerable 2026-07-29 01:09:05.309427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7872 vulnerable 2026-07-29 01:09:05.309096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7871 vulnerable 2026-07-29 01:09:05.308899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7803 vulnerable 2026-07-29 01:09:05.251299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7787 vulnerable 2026-07-29 01:09:05.240498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7755 vulnerable 2026-07-29 01:09:05.205947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7754 vulnerable 2026-07-29 01:09:05.205711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7667 vulnerable 2026-07-29 01:09:05.121487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7664 vulnerable 2026-07-29 01:09:05.116881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7663 vulnerable 2026-07-29 01:09:05.115287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14499 vulnerable 2026-07-29 00:26:17.069899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13448 vulnerable 2026-07-29 00:23:33.049558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13446 vulnerable 2026-07-29 00:23:33.048872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13445 vulnerable 2026-07-29 00:23:33.046310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10564 vulnerable 2026-07-29 00:23:29.688498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10561 vulnerable 2026-07-29 00:23:29.679981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10560 vulnerable 2026-07-29 00:23:29.674906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10546 vulnerable 2026-07-29 00:23:29.595022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10140 vulnerable 2026-07-29 00:20:51.896841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10134 vulnerable 2026-07-29 00:20:51.896513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10129 vulnerable 2026-07-29 00:20:51.888657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7528 vulnerable 2026-06-08 08:08:57.370996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7524 vulnerable 2026-06-08 08:08:57.366288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6542 vulnerable 2026-06-08 08:07:04.873256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.