Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

May 5, 2025

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Langflow: Missing Authentication Vulnerability

    Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests. Added to CISA KEV on 2025-05-05.

    LangflowClosed May 5, 2025