Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Search results
CVE-LINKED INVENTORY39 SECURITY RECORDS

langflow-ai

langflow

Affected and fixed version statements observed in the public BlackTree CVE catalogue. These statements describe vulnerability scope, not publisher support entitlement.

Lifecycle evidence status

Official registry publication history is available at langflow, but registry activity is not a publisher support boundary.

A missing support date does not mean the product is supported. CVE publication dates and affected-version ranges must not be interpreted as EOL dates.

CVE-observed version history

CVEPublishedAffected versionsFixed version informationPublisher evidence
CVE-2026-105741 5 Oct 2026 langflow: >= 1.5.0, < 1.10.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-105740 5 Oct 2026 langflow: < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-105699 5 Oct 2026 langflow: >= 1.6.8, <= 1.9.0 1.9.1. Update reference ↗
CVE-2026-105698 5 Oct 2026 langflow: >= 1.0.0, < 1.10.1; langflow-base: < 0.10.1 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-105697 5 Oct 2026 langflow: >= 1.1.2, < 1.10.3; langflow-base: >= 0.1.2, < 0.10.3; lfx: < 1.10.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-101861 28 Sep 2026 langflow: 1.0.16 < 1.12.0, 0.0.94 < 1.12.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-48520 23 Jun 2026 < 1.10.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-33760 23 Jun 2026 < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-42867 23 Jun 2026 < 1.9.0 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-55423 23 Jun 2026 < 1.7.0 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-55446 23 Jun 2026 < 1.0.19 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-48519 23 Jun 2026 < 1.9.2 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-55447 23 Jun 2026 < 1.9.2 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-55450 23 Jun 2026 < 1.9.1 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-12822 21 Jun 2026 1.9.0; 1.9.1; 1.9.2; 1.9.3 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-42048 12 May 2026 < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-7700 3 May 2026 langflow: 1.10.0, 1.10.1, 1.10.2 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-7687 3 May 2026 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-6600 20 Apr 2026 1.8.0; 1.8.1; 1.8.2; 1.8.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-6599 20 Apr 2026 1.8.0; 1.8.1; 1.8.2; 1.8.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-6598 20 Apr 2026 1.8.0; 1.8.1; 1.8.2; 1.8.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-6597 20 Apr 2026 1.8.0; 1.8.1; 1.8.2; 1.8.3 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-6596 20 Apr 2026 1.0; 1.1.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-34046 27 Mar 2026 < 1.5.1; < 0.5.1 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-33873 27 Mar 2026 < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-5027 27 Mar 2026 version range in vendor record No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-5026 27 Mar 2026 version range in vendor record No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-5025 27 Mar 2026 version range in vendor record No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-5022 27 Mar 2026 version range in vendor record No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-33497 24 Mar 2026 < 1.7.1 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-33484 24 Mar 2026 >= 1.0.0, < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2026-33475 24 Mar 2026 < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-33309 24 Mar 2026 >= 1.2.0, < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-33053 20 Mar 2026 < 1.9.0 No fixed version is explicitly recorded in the structured CVE data. Update reference ↗
CVE-2026-27966 26 Feb 2026 < 1.8.0 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2026-21445 2 Jan 2026 < 1.7.0.dev45 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗
CVE-2025-68478 19 Dec 2025 < 1.7.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2025-68477 19 Dec 2025 < 1.7.0 No fixed version is explicitly recorded in the structured CVE data. Use CVE record
CVE-2025-57760 25 Aug 2025 <= 1.5.0 An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release. Update reference ↗

How this record is maintained

The CVE inventory is reconciled automatically from cve.blacktree.nl. Exact identity matches link to existing Lifecycle product or package histories. Unmatched products stay in a prioritised publisher-source research queue, and Lifecycle marks the date gap instead of inferring a support boundary from vulnerability data.