{"data":{"ecosystem":"pypi","name":"lfx-docling","url":"https://aisecwatch.com/packages/pypi/lfx-docling","latestVersion":"0.2.0","firstReleaseAt":"2026-06-03T01:54:04.335Z","repository":"https://github.com/langflow-ai/langflow","llm":{"exposure":"direct","depth":0,"integratedAt":"2026-09-11T00:38:38.049Z","integratedVersion":"0.1.7rc0","sdks":["huggingface"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:httpx"]},"dependencies":[{"ecosystem":"pypi","name":"docling-core","versionSpec":"<3.0.0,>=2.36.1","scope":"runtime"},{"ecosystem":"pypi","name":"lfx","versionSpec":"<2.0.0,>=1.13.0.dev0","scope":"runtime"},{"ecosystem":"pypi","name":"transformers","versionSpec":"<6.0.0,>=5.10.1","scope":"extra:all"},{"ecosystem":"pypi","name":"docling","versionSpec":"<3.0.0,>=2.125.0","scope":"extra:all"},{"ecosystem":"pypi","name":"httpx","versionSpec":"<1.0.0,>=0.28.1","scope":"runtime"},{"ecosystem":"pypi","name":"langchain-docling","versionSpec":">=1.1.0","scope":"extra:all"},{"ecosystem":"pypi","name":"ocrmac","versionSpec":">=1.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"rapidocr-onnxruntime","versionSpec":">=1.4.4","scope":"extra:all"},{"ecosystem":"pypi","name":"tesserocr","versionSpec":">=2.8.0","scope":"extra:all"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":">=0.7.0","scope":"extra:all"},{"ecosystem":"pypi","name":"torch","versionSpec":">=2.14.0","scope":"extra:all"},{"ecosystem":"pypi","name":"torchvision","versionSpec":">=0.21.0","scope":"extra:all"}],"advisories":[{"id":"b0473977-f378-4d0e-b2ac-2ce4d288d4e7","url":"https://aisecwatch.com/issues/b0473977-f378-4d0e-b2ac-2ce4d288d4e7","cveId":null,"title":"GHSA-j8f7-x8jm-wmm4: Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)","headline":null,"severity":"medium","publishedAt":"2026-10-06T13:39:57.000Z","affected":["lfx-docling@< 0.1.2 (fixed: 0.1.2)","lfx@< 1.10.3 (fixed: 1.10.3)","langflow-base@< 0.10.3 (fixed: 0.10.3)","langflow@< 1.10.3 (fixed: 1.10.3)"],"epssScore":null,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T22:17:23.161Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}