VULNRABLE / Vulnerability / GHSA-j8f7-x8jm-wmm4

GHSA-j8f7-x8jm-wmm4

MEDIUM LOW langflow GHSA

Exploit verdict: No active-exploit signal

CVSS Score

5.5

Severity

MEDIUM

EPSS

—

Source

GHSA

Summary

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean...

What this means

GHSA-j8f7-x8jm-wmm4 is a medium-severity vulnerability affecting langflow, rated CVSS 5.5. Published October 6, 2026.

View full advisory at GHSA →