Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-104316 CVE-2026-104316 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background wo MEDIUM 6.5 Unknown 1 Details
CVE-2026-104315 CVE-2026-104315 - IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat MEDIUM 4.3 Unknown 1 Details
CVE-2026-104314 CVE-2026-104314 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow MEDIUM 6.5 Unknown 1 Details
CVE-2026-104312 CVE-2026-104312 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co LOW 3.5 Unknown 1 Details
CVE-2026-104310 CVE-2026-104310 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to MEDIUM 4.3 Unknown 1 Details
CVE-2026-104309 CVE-2026-104309 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to MEDIUM 6.5 Unknown 1 Details
CVE-2026-104308 CVE-2026-104308 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to im MEDIUM 4.3 Unknown 1 Details
CVE-2026-103092 CVE-2026-103092 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due HIGH 8.5 Unknown 1 Details
CVE-2026-102590 CVE-2026-102590 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to MEDIUM 5.0 Unknown 1 Details
CVE-2026-101288 CVE-2026-101288 - IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to impro HIGH 8.8 Unknown 1 Details
CVE-2025-13050 CVE-2025-13050 - Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user MEDIUM 5.4 Unknown 1 Details
CVE-2026-119142 CVE-2026-119142 - wasmtime: Wasmtime: Denial of Service via canceled asynchronous function calls MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119143 CVE-2026-119143 - wasmtime: Wasmtime: Denial of Service via unvalidated zero-length stream operations MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119141 CVE-2026-119141 - wasmtime: Wasmtime: Denial of Service via host panic during memory reallocation MEDIUM 5.3 Red Hat Unknown 2 sources Details
CVE-2026-119139 CVE-2026-119139 - wasmtime: wasmtime: Denial of Service via unhandled assertion in component function call MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119140 CVE-2026-119140 - wasmtime: wasmtime: Denial of Service via thread.yield in start functions MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119138 CVE-2026-119138 - wasmtime: wasmtime: Denial of Service via assertion failure after runtime trap MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119137 CVE-2026-119137 - wasmtime: Wasmtime: Denial of Service via recursive type drops MEDIUM 5.3 Red Hat Unknown 2 sources Details
CVE-2026-119136 CVE-2026-119136 - wasmtime: wasmtime: Denial of Service via mixed synchronous and asynchronous calls MEDIUM 4.8 Red Hat Unknown 2 sources Details
CVE-2026-119135 CVE-2026-119135 - wasmtime: Wasmtime: Denial of Service via component stream type mismatch MEDIUM 4.8 Red Hat Unknown 2 sources Details