Package impact
PyPI / langflow
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2026-33017 | critical | 9.8 | 10.0 | 2mo ago | Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication. | |
| CVE-2026-42048 | critical | 9.6 | 9.6 | 15d ago | Langflow Knowledge Bases API is Vulnerable to Path Traversal |