lfx
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | langflow-baselangflow | PyPI | Critical | Fix reported | |
| Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) | langflow-baselangflow | PyPI | Medium | Fix reported |