{"action":"Upgrade langflow-base to 0.9.1 or later.","affected":[{"fixed":"0.9.1","introduced":"0"}],"component":"langflow-base","cve_ids":["CVE-2026-6596"],"ecosystem":"PyPI","epss":0.00472,"exploited":false,"fixed_versions":["0.9.1"],"ghsa_id":"GHSA-vvfc-fp59-m92g","id":"tcs_01M5KG0WR2FAET6HD2M6VRF447","modified_at":"2026-07-13T16:43:24.520952172Z","published_at":"2026-04-20T03:34:42Z","references":["https://osv.dev/vulnerability/GHSA-vvfc-fp59-m92g","https://nvd.nist.gov/vuln/detail/CVE-2026-6596","https://github.com/langflow-ai/langflow/commit/b5662446bc8c54d928e278d3d26ad95b62425815","https://gist.github.com/chenhouser2025/c2aabfdee41009cfe45d28a9924742a0","https://github.com/langflow-ai/langflow","https://github.com/langflow-ai/langflow/commits/v1.9.1","https://vuldb.com/submit/791919","https://vuldb.com/vuln/358231","https://vuldb.com/vuln/358231/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-vvfc-fp59-m92g","url":"https://osv.dev/vulnerability/GHSA-vvfc-fp59-m92g"}],"summary":"Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API"}