lfx
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 3 advisory(ies) without a verdict
Advisories (3)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-j8f7-x8jm-wmm4 Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling) | < 1.10.3 | Undetermined |
| GHSA-w794-rj3p-xv45 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | < 1.10.3 | Undetermined |
| PYSEC-2026-4241 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration | < 1.10.3 | Undetermined |
Sources
| Source | Licence |
|---|