{"data":{"ecosystem":"pypi","name":"lfx","url":"https://aisecwatch.com/packages/pypi/lfx","latestVersion":"1.12.5","firstReleaseAt":"2025-07-29T21:46:29.129Z","repository":null,"llm":{"exposure":"direct","depth":0,"integratedAt":"2025-07-29T21:46:29.129Z","integratedVersion":"0.1.0","sdks":["langchain","mcp"],"path":[]},"authority":{"profile":["filesystem","http","mcp_tools"],"fromDependencies":["pypi:aiofiles","pypi:httpx","pypi:mcp"]},"dependencies":[{"ecosystem":"pypi","name":"langchain","versionSpec":"~=1.3.0","scope":"runtime"},{"ecosystem":"pypi","name":"langchain-classic","versionSpec":"~=1.0.7","scope":"runtime"},{"ecosystem":"pypi","name":"langchain-core","versionSpec":"<2.0.0,>=1.2.28","scope":"runtime"},{"ecosystem":"pypi","name":"lfx-bundles","versionSpec":"<2.0,>=1.1.32","scope":"extra:bundles"},{"ecosystem":"pypi","name":"lfx-datastax","versionSpec":"<1.0.0,>=0.1.3","scope":"extra:cassandra"},{"ecosystem":"pypi","name":"mcp","versionSpec":"<2.0.0,>=1.17.0","scope":"runtime"},{"ecosystem":"pypi","name":"lfx-toolguard","versionSpec":"<1.0.0,>=0.1.0","scope":"extra:toolguard"},{"ecosystem":"pypi","name":"a2wsgi","versionSpec":">=1.10.0","scope":"runtime"},{"ecosystem":"pypi","name":"ag-ui-protocol","versionSpec":">=0.1.10","scope":"runtime"},{"ecosystem":"pypi","name":"aiofile","versionSpec":"<4.0.0,>=3.8.0","scope":"runtime"},{"ecosystem":"pypi","name":"aiofiles","versionSpec":"<25.0.0,>=24.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"asyncer","versionSpec":"<1.0.0,>=0.0.8","scope":"runtime"},{"ecosystem":"pypi","name":"bcrypt","versionSpec":"<6.0.0,>=4.3.0","scope":"runtime"},{"ecosystem":"pypi","name":"beautifulsoup4","versionSpec":"<5.0.0,>=4.12.3","scope":"runtime"},{"ecosystem":"pypi","name":"cachetools","versionSpec":">=6.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"chardet","versionSpec":">=7.3.0","scope":"runtime"},{"ecosystem":"pypi","name":"cryptography","versionSpec":">=50.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"defusedxml","versionSpec":"<1.0.0,>=0.7.1","scope":"runtime"},{"ecosystem":"pypi","name":"docstring-parser","versionSpec":"<1.0.0,>=0.16","scope":"runtime"},{"ecosystem":"pypi","name":"emoji","versionSpec":"<3.0.0,>=2.14.1","scope":"runtime"},{"ecosystem":"pypi","name":"exec-sandbox","versionSpec":"<1.0.0,>=0.22.0","scope":"extra:sandbox"},{"ecosystem":"pypi","name":"fastapi","versionSpec":"<1.0.0,>=0.135.0","scope":"runtime"},{"ecosystem":"pypi","name":"filelock","versionSpec":"<4.0.0,>=3.20.1","scope":"runtime"},{"ecosystem":"pypi","name":"gunicorn","versionSpec":">=22.0","scope":"runtime"},{"ecosystem":"pypi","name":"h2","versionSpec":">=4.4.1","scope":"runtime"},{"ecosystem":"pypi","name":"httpx","versionSpec":"<1.0.0,>=0.24.0","scope":"runtime"},{"ecosystem":"pypi","name":"json-repair","versionSpec":"<1.0.0,>=0.30.3","scope":"runtime"},{"ecosystem":"pypi","name":"langflow-sdk","versionSpec":">=0.4.0","scope":"runtime"},{"ecosystem":"pypi","name":"loguru","versionSpec":"<1.0.0,>=0.7.3","scope":"runtime"},{"ecosystem":"pypi","name":"markitdown","versionSpec":"<2.0.0,>=0.1.4","scope":"runtime"},{"ecosystem":"pypi","name":"nanoid","versionSpec":"<3.0.0,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"networkx","versionSpec":"<4.0.0,>=3.4.2","scope":"runtime"},{"ecosystem":"pypi","name":"openpyxl","versionSpec":"<4.0.0,>=3.1.5","scope":"runtime"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":"<2.0.0,>=1.30.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp","versionSpec":"<2.0.0,>=1.30.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-exporter-prometheus","versionSpec":"<1.0.0,>=0.50b0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-instrumentation-fastapi","versionSpec":"<1.0.0,>=0.50b0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-instrumentation-sqlalchemy","versionSpec":"<1.0.0,>=0.50b0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-instrumentation-system-metrics","versionSpec":"<1.0.0,>=0.50b0","scope":"extra:otel"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"<2.0.0,>=1.30.0","scope":"extra:otel"},{"ecosystem":"pypi","name":"orjson","versionSpec":"<4.0.0,>=3.11.6","scope":"runtime"},{"ecosystem":"pypi","name":"packaging","versionSpec":"<25.0,>=24.1","scope":"runtime"},{"ecosystem":"pypi","name":"pandas","versionSpec":"<3.0.0,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pillow","versionSpec":"<13.0.0,>=12.3.0","scope":"runtime"},{"ecosystem":"pypi","name":"platformdirs","versionSpec":"<5.0.0,>=4.3.8","scope":"runtime"},{"ecosystem":"pypi","name":"psutil","versionSpec":"<8.0.0,>=5.9.0","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"<2.14,>=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic-settings","versionSpec":"<3.0.0,>=2.10.1","scope":"runtime"},{"ecosystem":"pypi","name":"pyjwt","versionSpec":"<3.0.0,>=2.15.1","scope":"runtime"},{"ecosystem":"pypi","name":"pypdf","versionSpec":"<7.0.0,>=6.16.1","scope":"runtime"},{"ecosystem":"pypi","name":"python-dotenv","versionSpec":"<2.0.0,>=1.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":"<7.0.0,>=6.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"rich","versionSpec":"<14.0.0,>=13.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"setuptools","versionSpec":"<84.0.0,>=83.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"sqlalchemy","versionSpec":"<2.1.0,>=2.0.38","scope":"runtime"},{"ecosystem":"pypi","name":"structlog","versionSpec":"<26.0.0,>=25.4.0","scope":"runtime"},{"ecosystem":"pypi","name":"toml","versionSpec":"<1.0.0,>=0.10.2","scope":"runtime"},{"ecosystem":"pypi","name":"tomli","versionSpec":"<3.0.0,>=2.2.1","scope":"runtime"},{"ecosystem":"pypi","name":"typer","versionSpec":"<1.0.0,>=0.16.0","scope":"runtime"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":"<5.0.0,>=4.14.0","scope":"runtime"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":"<1.0.0,>=0.34.3","scope":"runtime"},{"ecosystem":"pypi","name":"validators","versionSpec":"<1.0.0,>=0.34.0","scope":"runtime"},{"ecosystem":"pypi","name":"wheel","versionSpec":"<1.0.0,>=0.46.2","scope":"runtime"}],"advisories":[{"id":"b0473977-f378-4d0e-b2ac-2ce4d288d4e7","url":"https://aisecwatch.com/issues/b0473977-f378-4d0e-b2ac-2ce4d288d4e7","cveId":null,"title":"GHSA-j8f7-x8jm-wmm4: Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)","severity":"medium","publishedAt":"2026-10-06T13:39:57.000Z","affected":["lfx-docling@< 0.1.2 (fixed: 0.1.2)","lfx@< 1.10.3 (fixed: 1.10.3)","langflow-base@< 0.10.3 (fixed: 0.10.3)","langflow@< 1.10.3 (fixed: 1.10.3)"],"epssScore":null}],"checkedAt":"2026-10-10T00:10:07.558Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}