Skip to content
Threat Feed
Subscribe

Tag

Information-Leak

2 briefs RSS
high advisory

Langflow Unauthenticated File Upload Leads to DoS and Information Leak (CVE-2026-55450)

An unauthenticated file upload vulnerability, CVE-2026-55450, in Langflow versions prior to 1.9.1 allows remote attackers to upload arbitrary amounts of data to the server via the `/api/v1/upload/{flow_id}` endpoint, leading to disk space exhaustion and Denial-of-Service, additionally leaking the absolute file path in the server's response.

PoC Langflow denial-of-service unauthenticated-access information-leak web-vulnerability
2r 3t 1c updated
medium advisory

Firebird FB3 Client Library Information Leak (CVE-2025-65104)

Firebird FB3 client library incorrectly handles data lengths when communicating with FB4+ servers, leading to an information leak exploitable by a local attacker.

cve-2025-65104 information-leak firebird
2r 1t 1c