Search
Stories, the companies and people Loro tracks, and the primary records behind them — filings, donations, contracts and disclosures.
Primary record4
IBM Langflow: IBM Langflow Code Injection Vulnerability actively exploited
Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments. Required action: Apply mitigations in accordance with vendor i
Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability actively exploited
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations. Required action: Apply mitigations in accorda
Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability actively exploited
Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request.
Langflow Langflow: Langflow Origin Validation Error Vulnerability actively exploited
Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-ori