Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-32fv-f5hq-fmx9

Опубликовано: 30 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.

EPSS

Процентиль: 6%
0.00168
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 месяца назад

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored credentials due to the use of a weak and reversible key derivation mechanism for encryption at rest.

EPSS

Процентиль: 6%
0.00168
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-338