Start for Free
pypi

langflow-base

View on pypi registry
15 Total advisories
15 Vulnerabilities
0 Malware

Dependency scanning

Check whether langflow-base is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
PyPI KEV

CVE-2025-3248

Langflow Unauth RCE
MEDIUM 5.4
PyPI

CVE-2026-105698

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
MEDIUM 5.4
PyPI

CVE-2026-105698

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
CRITICAL 9.9
PyPI

CVE-2026-105697

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
CRITICAL 9.9
PyPI

CVE-2026-105697

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
UNKNOWN
PyPI

GHSA-j8f7-x8jm-wmm4

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)
UNKNOWN
PyPI

CVE-2026-34046

Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
UNKNOWN
PyPI

CVE-2026-34046

Langflow: Authenticated Users Can Read, Modify, and Delete Any Flow via Missing Ownership Check
HIGH 7.3
PyPI

CVE-2026-6596

Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
UNKNOWN
PyPI

CVE-2026-21445

Langflow Missing Authentication on Critical API Endpoints
UNKNOWN
PyPI

CVE-2026-21445

Langflow Missing Authentication on Critical API Endpoints
HIGH 7.3
PyPI

CVE-2026-6596

Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
HIGH 8.8
PyPI

CVE-2025-57760

Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
HIGH 8.8
PyPI

CVE-2025-57760

Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)
UNKNOWN
PyPI KEV

CVE-2025-3248

Langflow Unauth RCE

Browse more PyPI advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes