Langflow: Unauthenticated DoS through multipart form boundary file upload
Affects: Langflow
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Langflow: Logout button does not clear session
Affects: Langflow
Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access…
Affects: Langflow
n8n: Missing Token Validation on Microsoft Agent 365 Trigger and Stripe Nodes
Affects: n8n
n8n: Credential Exfiltration via Permission Bypass
Affects: n8n
n8n: Prototype Pollution enables confused-deputy execution via public webhooks
Affects: n8n
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Affects: n8n
n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host
Affects: n8n
n8n: Stored XSS in Chat Trigger Node
Affects: n8n
n8n: Same-Origin XSS in Respond to Webhook Node
Affects: n8n
n8n: Git Node Clone and Push Operations Bypass File Sandbox
Affects: n8n
n8n: Python sandbox escape
Affects: n8n
Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read
Affects: Langflow
Langflow: Unauthenticated RCE in Shareable Playgrounds
Affects: Langflow
n8n: n8n Has a Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints
Affects: n8n
n8n: n8n Has a Source Control Pull SQL Injection
Affects: n8n
n8n: n8n Has an XML Node Prototype Pollution Patch Bypass
Affects: n8n
n8n: n8n Has an Arbitrary File Read via Git Node
Affects: n8n
n8n: HTTP Request Node Pagination Prototype Pollution to RCE
Affects: n8n
Langflow: Path Traversal in Knowledge Bases API via Creation Endpoint
Affects: Langflow
Langflow: IDOR/BOLA in Monitor API, Missing Ownership Enforcement on 7 Endpoints
Affects: Langflow
n8n: Denial of Service via ZIP decompression in webhook workflow
Affects: n8n
n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
Affects: n8n
n8n: Microsoft SQL Node Prototype Pollution
Affects: n8n
n8n: Merge Node SQL Mode Prototype Pollution
Affects: n8n
n8n: SQL Injection in Postgres v1/TimesclaeDB Nodes
Affects: n8n
n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Affects: n8n
n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints
Affects: n8n
Flowise: Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow…
Affects: Flowise
Flowise: Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom MCP…
Affects: Flowise
Flowise: Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change…
Affects: Flowise
vLLM: Incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
Affects: vLLM
vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
Affects: vLLM
vLLM: OOM Denial of Service via Audio Decompression Bomb
Affects: vLLM
vLLM: Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the…
Affects: vLLM
vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving
Affects: vLLM
vLLM: OpenAI auth bypass
Affects: vLLM
vLLM: vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and…
Affects: vLLM
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code…
Affects: vLLM
n8n: N8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook…
Affects: n8n
n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass
Affects: n8n
Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected…
Affects: Flowise
LiteLLM: Authentication Bypass via Host Header Injection
Affects: LiteLLM
Jupyter: Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing…
Affects: Jupyter
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
Affects: LangChain
Keras: DiskIOStore permits path traversal through crafted layer names
Affects: Keras
Langflow: IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected…
Affects: Langflow
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege…
Affects: Langflow
Langflow: A vulnerability was identified in langflow-ai langflow up to 1.9.3
Affects: Langflow
LiteLLM: BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
Affects: LiteLLM