Issues

Framework refresh needs attention (2026-10-26)

depalmar/ai-dfir-toolkit#157 · opened

on Oct 26, 2026

[intel] github-advisories:GHSA-9fpm-3445-2vx4 - GHSA-9fpm-3445-2vx4 langflow: Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

depalmar/ai-dfir-toolkit#155 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-qqw9-2vj9-hx7r - GHSA-qqw9-2vj9-hx7r langflow: Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Descri

depalmar/ai-dfir-toolkit#156 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-cf6m-vc3m-7cgm - GHSA-cf6m-vc3m-7cgm langflow: Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

depalmar/ai-dfir-toolkit#153 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-w584-2h2r-2hvf - GHSA-w584-2h2r-2hvf langflow: Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

depalmar/ai-dfir-toolkit#154 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-jxw3-mjmx-3pqm - GHSA-jxw3-mjmx-3pqm langflow: Langflow: Weak Fernet Key via random.seed()

depalmar/ai-dfir-toolkit#152 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-j8f7-x8jm-wmm4 - GHSA-j8f7-x8jm-wmm4 langflow: Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearX

depalmar/ai-dfir-toolkit#150 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-8qpj-27x8-pwpq - GHSA-8qpj-27x8-pwpq langflow: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escal

depalmar/ai-dfir-toolkit#151 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-4f6c-2vvp-gw82 - GHSA-4f6c-2vvp-gw82 langflow: Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

depalmar/ai-dfir-toolkit#149 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-4hmc-cfm3-w43c - GHSA-4hmc-cfm3-w43c langflow: Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

depalmar/ai-dfir-toolkit#148 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-w794-rj3p-xv45 - GHSA-w794-rj3p-xv45 langflow: Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

depalmar/ai-dfir-toolkit#146 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-gh98-4phw-6fmw - GHSA-gh98-4phw-6fmw langflow: Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoin

depalmar/ai-dfir-toolkit#147 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-9gvv-qjj3-2p6g - GHSA-9gvv-qjj3-2p6g flowise: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

depalmar/ai-dfir-toolkit#145 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-pq7j-f95f-qfcv - GHSA-pq7j-f95f-qfcv @anthropic-ai/claude-code: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

depalmar/ai-dfir-toolkit#143 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-w7x8-q2gp-5cgg - GHSA-w7x8-q2gp-5cgg flowise: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

depalmar/ai-dfir-toolkit#144 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-6prh-2h8m-c8cw - GHSA-6prh-2h8m-c8cw @modelcontextprotocol/sdk: MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-se

depalmar/ai-dfir-toolkit#141 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-6qxp-vccf-f47h - GHSA-6qxp-vccf-f47h @modelcontextprotocol/sdk: MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

depalmar/ai-dfir-toolkit#142 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-22jm-h49p-29qw - GHSA-22jm-h49p-29qw @modelcontextprotocol/sdk: MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

depalmar/ai-dfir-toolkit#140 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-46jr-4wx8-v453 - GHSA-46jr-4wx8-v453 @modelcontextprotocol/sdk: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validati

depalmar/ai-dfir-toolkit#138 · opened

on Oct 21, 2026

[intel] github-advisories:GHSA-rvq5-wwqv-78pq - GHSA-rvq5-wwqv-78pq @modelcontextprotocol/sdk: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

depalmar/ai-dfir-toolkit#139 · opened

on Oct 21, 2026

[intel] openai-global-affairs:https-openai-com-index-third-moment-research - How Third Moment Research runs 10,000 agents for 36+ hours

depalmar/ai-dfir-toolkit#136 · opened

on Oct 21, 2026

[intel] openai-global-affairs:https-openai-com-index-the-eus-next-chapter-in-ai-is-agentic - The EU’s next chapter in AI is agentic

depalmar/ai-dfir-toolkit#137 · opened

on Oct 21, 2026

[intel] openai-global-affairs:https-openai-com-index-benefit-street-partners - Benefit Street Partners answers questions faster with Codex

depalmar/ai-dfir-toolkit#135 · opened

on Oct 21, 2026

[intel] openai-global-affairs:https-openai-com-index-stack-overflow-chatgpt-plugin - Stack Overflow for Agents triples signups with ChatGPT plugin

depalmar/ai-dfir-toolkit#134 · opened

on Oct 21, 2026

[intel] microsoft-security:og-2026-10-19-agents-are-your-newest-insiders-security-must-move-at-their-speed- - Agents are your newest insiders. Security must move at their speed.

depalmar/ai-dfir-toolkit#132 · opened

on Oct 21, 2026

Navigation Menu

Repository navigation

Issues

Framework refresh needs attention (2026-10-26)

[intel] github-advisories:GHSA-9fpm-3445-2vx4 - GHSA-9fpm-3445-2vx4 langflow: Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

[intel] github-advisories:GHSA-qqw9-2vj9-hx7r - GHSA-qqw9-2vj9-hx7r langflow: Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Descri

[intel] github-advisories:GHSA-cf6m-vc3m-7cgm - GHSA-cf6m-vc3m-7cgm langflow: Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass

[intel] github-advisories:GHSA-w584-2h2r-2hvf - GHSA-w584-2h2r-2hvf langflow: Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

[intel] github-advisories:GHSA-jxw3-mjmx-3pqm - GHSA-jxw3-mjmx-3pqm langflow: Langflow: Weak Fernet Key via random.seed()

[intel] github-advisories:GHSA-j8f7-x8jm-wmm4 - GHSA-j8f7-x8jm-wmm4 langflow: Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearX

[intel] github-advisories:GHSA-8qpj-27x8-pwpq - GHSA-8qpj-27x8-pwpq langflow: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escal

[intel] github-advisories:GHSA-4f6c-2vvp-gw82 - GHSA-4f6c-2vvp-gw82 langflow: Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

[intel] github-advisories:GHSA-4hmc-cfm3-w43c - GHSA-4hmc-cfm3-w43c langflow: Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

[intel] github-advisories:GHSA-w794-rj3p-xv45 - GHSA-w794-rj3p-xv45 langflow: Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

[intel] github-advisories:GHSA-gh98-4phw-6fmw - GHSA-gh98-4phw-6fmw langflow: Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoin

[intel] github-advisories:GHSA-9gvv-qjj3-2p6g - GHSA-9gvv-qjj3-2p6g flowise: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

[intel] github-advisories:GHSA-pq7j-f95f-qfcv - GHSA-pq7j-f95f-qfcv @anthropic-ai/claude-code: Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning

[intel] github-advisories:GHSA-w7x8-q2gp-5cgg - GHSA-w7x8-q2gp-5cgg flowise: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

[intel] github-advisories:GHSA-6prh-2h8m-c8cw - GHSA-6prh-2h8m-c8cw @modelcontextprotocol/sdk: MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-se

[intel] github-advisories:GHSA-6qxp-vccf-f47h - GHSA-6qxp-vccf-f47h @modelcontextprotocol/sdk: MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

[intel] github-advisories:GHSA-22jm-h49p-29qw - GHSA-22jm-h49p-29qw @modelcontextprotocol/sdk: MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

[intel] github-advisories:GHSA-46jr-4wx8-v453 - GHSA-46jr-4wx8-v453 @modelcontextprotocol/sdk: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validati

[intel] github-advisories:GHSA-rvq5-wwqv-78pq - GHSA-rvq5-wwqv-78pq @modelcontextprotocol/sdk: MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service

[intel] openai-global-affairs:https-openai-com-index-third-moment-research - How Third Moment Research runs 10,000 agents for 36+ hours

[intel] openai-global-affairs:https-openai-com-index-the-eus-next-chapter-in-ai-is-agentic - The EU’s next chapter in AI is agentic

[intel] openai-global-affairs:https-openai-com-index-benefit-street-partners - Benefit Street Partners answers questions faster with Codex

[intel] openai-global-affairs:https-openai-com-index-stack-overflow-chatgpt-plugin - Stack Overflow for Agents triples signups with ChatGPT plugin

[intel] microsoft-security:og-2026-10-19-agents-are-your-newest-insiders-security-must-move-at-their-speed- - Agents are your newest insiders. Security must move at their speed.