Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7wqc-w7wj-5fm5

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

EPSS

Процентиль: 10%
0.00201
Низкий

7.7 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.7
nvd
18 дней назад

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

EPSS

Процентиль: 10%
0.00201
Низкий

7.7 High

CVSS3

Дефекты

CWE-918