Package impact
PyPI / langflow
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2026-6599 | medium | 6.3 | 6.3 | 1mo ago | Langflow vulnerable to injection | |
| CVE-2026-6598 | medium | 4.3 | 4.3 | 1mo ago | Langflow: Cleartext Storage of Authentication Settings in Project Creation Endpoint | |
| CVE-2026-6597 | low | 2.7 | 2.7 | 1mo ago | A weakness has been identified in langflow-ai langflow up to 1.8.3. Impacted is the function remove_api_keys/has_api_terms of the file src/backend/base/langflow/api/utils/core.py of the component Flo… |