Aikido Intel
Secure My Code
Package Health

langflow

A Python package with a built-in web application

Latest 1.13.1PyPIPyPIMIT
Declared in package metadata.

74%

Total Score

caution

Active project with strong release and contributor activity, but nearly all workflow actions are unpinned and the workflow audit is incomplete.

Are you affected? Scan for Free

Health Score Breakdown

Workflow auditcaution

The audit found 222 unpinned action references out of 223, and only 30 of 52 workflows were analyzed, leaving the workflow review incomplete.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-754477
langflow is vulnerable to Insufficiently Protected Credentials in versions 1.0.0 - 1.12.5.
1.0.0 - 1.12.5
Medium
AIKIDO-2026-472784
langflow is vulnerable to Code Injection in versions 1.0.0 - 1.12.5.
1.0.0 - 1.12.5
High
AIKIDO-2026-69286
langflow is vulnerable to Code Injection in versions 1.0.0 - 1.12.8.
1.0.0 - 1.12.8
Critical
AIKIDO-2026-662132
langflow is vulnerable to Authentication Bypass in versions 1.0.0 - 1.12.8.
1.0.0 - 1.12.8
Critical
AIKIDO-2026-159862
langflow is vulnerable to Code Injection in versions 1.1.0 - 1.10.0.
1.1.0 - 1.10.0
Critical

Package versions

VersionPublishedVulnerabilities
1.14.0.dev207 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev196 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev185 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev174 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev164 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev154 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev143 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev132 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev121 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
1.14.0.dev1131 Oct 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
langflow-base
Version ==1.13.1
—
—
lfx-amazon
Version <1.0.0,>=0.2.2
—
—
lfx-anthropic
Version <1.0.0,>=0.2.0
—
—
lfx-azure
Version <1.0.0,>=0.2.0
—
—
lfx-cohere
Version <1.0.0,>=0.2.0
—
—

Weekly Downloads

Info

Last Published
5 days ago
Created
3 years ago

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

Start for Free Book a Demo

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPAuthorized

© All Intel data is openly available and commercially licensed.