Threat Feed
Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
INFORMATIONAL
CVE-2026-106036 - Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS c
Source ↗
CVE-2026-106036 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
CRITICAL
CVE-2026-104339 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutraliza
Source ↗
CVE-2026-104339 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104331 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
Source ↗
CVE-2026-104331 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
HIGH
CVE-2026-104328 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro
Source ↗
CVE-2026-104328 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
HIGH
CVE-2026-104324 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to deser
Source ↗
CVE-2026-104324 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
HIGH
CVE-2026-104317 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitr
Source ↗
CVE-2026-104317 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104316 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo
Source ↗
CVE-2026-104316 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104315 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
Source ↗
CVE-2026-104315 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104314 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow
Source ↗
CVE-2026-104314 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
LOW
CVE-2026-104312 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co
Source ↗
CVE-2026-104312 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104310 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
Source ↗
CVE-2026-104310 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104309 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
Source ↗
CVE-2026-104309 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-104308 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to im
Source ↗
CVE-2026-104308 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
HIGH
CVE-2026-103092 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due
Source ↗
CVE-2026-103092 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-102590 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to
Source ↗
CVE-2026-102590 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
HIGH
CVE-2026-101288 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro
Source ↗
CVE-2026-101288 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2025-13050 - Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user
Source ↗
CVE-2025-13050 ·
NIST NVD - National Vulnerability Database · published 2026-10-29T16:17
MEDIUM
CVE-2026-119142 - wasmtime: Wasmtime: Denial of Service via canceled asynchronous function calls
Source ↗
CVE-2026-119142 ·
Red Hat - CVE Feed · published 2026-10-29T15:58
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-119143 - wasmtime: Wasmtime: Denial of Service via unvalidated zero-length stream operations
Source ↗
CVE-2026-119143 ·
Red Hat - CVE Feed · published 2026-10-29T15:58
· correlated from 2 sources
Red Hat
MEDIUM
CVE-2026-119141 - wasmtime: Wasmtime: Denial of Service via host panic during memory reallocation
Source ↗
CVE-2026-119141 ·
Red Hat - CVE Feed · published 2026-10-29T15:58
· correlated from 2 sources
Red Hat