GHSA-9pw3-x84f-xcwf

Duplicate Advisory: Langflow: Weak Fernet Key via random.seed()

Retiré · 2026-10-05 22:31 UTC

En bref

Publiée: 2026-08-05 21:31 UTC
Mise à jour: 2026-10-05 22:45 UTC
CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jxw3-mjmx-3pqm. This link is maintained to preserve external references. ## Original Description IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

Paquets affectés

Paquet	Versions
PyPI · langflow	introduced 0, last affected 1.10.0

Références

https://nvd.nist.gov/vuln/detail/CVE-2026-9205 ADVISORY
https://github.com/langflow-ai/langflow/pull/13704 WEB
https://github.com/langflow-ai/langflow/commit/094694d3f20c1da499f4d8dbac15c510609e3026 WEB
https://www.ibm.com/support/pages/node/7282648 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database