{"full_name":"langflow-ai/langflow","owner":"langflow-ai","name":"langflow","url":"https://github.com/langflow-ai/langflow","description":"Langflow is a powerful tool for building and deploying AI-powered agents and workflows.","homepage":"http://www.langflow.org","topics":[],"language":"Python","license":"MIT","avatar":"https://avatars.githubusercontent.com/u/85702467?v=4","created_at":"2023-02-08T22:28:03Z","pushed_at":"2026-11-10T08:47:07Z","metrics":{"stars":156497,"forks":10377,"watchers":525,"issues":3590,"prs":11819,"releases":319,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":720},"growth":{"day":{"stars":36,"forks":14,"base_day":"2026-11-09"},"week":{"stars":231,"forks":66,"base_day":"2026-11-03"},"month":{"stars":988,"forks":195,"base_day":"2026-10-11"}},"history":{"dates":["2026-09-06","2026-09-07","2026-09-08","2026-09-09","2026-09-10","2026-09-11","2026-09-12","2026-09-13","2026-09-14","2026-09-15","2026-09-16","2026-09-17","2026-09-18","2026-09-19","2026-09-20","2026-09-21","2026-09-22","2026-09-23","2026-09-24","2026-09-25","2026-09-26","2026-09-27","2026-09-28","2026-09-29","2026-09-30","2026-10-01","2026-10-02","2026-10-03","2026-10-04","2026-10-05","2026-10-06","2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-09","2026-11-10"],"stars":[153627,153670,153712,153739,153767,153808,153867,154032,154111,154200,154248,154289,154396,154468,154511,154551,154589,154657,154799,154835,154889,154943,154977,155010,155101,155143,155181,155211,155249,155275,155336,155376,155433,155452,155479,155509,155543,155567,155403,155432,155472,155548,155615,155665,155709,155753,155777,155839,155879,155891,155924,155971,155983,156039,156069,156110,156143,156166,156266,156296,156461,156497],"forks":[9922,9932,9937,9948,9948,9954,9960,9994,10002,10013,10021,10025,10045,10058,10054,10062,10067,10080,10087,10097,10104,10108,10113,10116,10122,10125,10129,10140,10147,10149,10152,10149,10158,10165,10175,10182,10186,10191,10189,10192,10196,10242,10247,10224,10234,10236,10240,10261,10251,10230,10238,10242,10239,10248,10251,10257,10263,10280,10311,10317,10363,10377],"watchers":[541,541,541,541,541,541,540,542,542,540,540,542,544,544,539,540,540,541,543,544,544,544,544,544,545,545,544,543,543,543,543,541,541,541,541,542,542,541,541,542,542,544,543,544,543,543,541,541,540,532,532,532,527,527,527,526,526,525,526,527,525,525],"issues_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"prs_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null]},"boards":{"total":62},"same_owner":[],"issues":[{"number":8476,"title":"Flows not working when using celery rabitmq and redis","comments":23,"created_at":"2025-06-11T05:34:00Z"},{"number":1864,"title":"[Feature Request] Collaborative/Access Control enhancement ","comments":21,"created_at":"2024-05-08T08:36:55Z"},{"number":8925,"title":"Error Building Component Error building Component SRT handle: Error running method \"control_txt\": a bytes-like object is required, not 'str'","comments":19,"created_at":"2025-07-08T03:39:43Z"},{"number":8503,"title":"Serve langflow at custom path","comments":15,"created_at":"2025-06-12T03:57:32Z"},{"number":11364,"title":"Issue with using Microsoft SQL Server","comments":12,"created_at":"2026-01-20T10:16:30Z"},{"number":9023,"title":"JWT Error on docker deployment","comments":12,"created_at":"2025-07-11T23:40:05Z"},{"number":6684,"title":"Out of memory after multiple executions of custom component","comments":11,"created_at":"2025-02-18T12:37:46Z"},{"number":5541,"title":"[Feature Request] Scheduled Trigger/cron-like component to run a flow repeatedly","comments":11,"created_at":"2025-01-04T00:08:23Z"}],"discussions":[{"number":16195,"title":"Show and tell: a check step after the agent node — so a flow's code output gets reviewed before it ships","comments":0,"category":"Show and tell","created_at":"2026-11-05T15:10:56Z"},{"number":16103,"title":"Apizie Finance Remote MCP Server for SEC EDGAR and FRED Data in Langflow Flows","comments":0,"category":"Show and tell","created_at":"2026-11-02T04:43:06Z"},{"number":16049,"title":"Before asking a flow for review themes: check the table, denominator and evidence rows","comments":0,"category":"Show and tell","created_at":"2026-10-28T19:23:52Z"},{"number":16011,"title":"A separate TXT reading copy from existing subtitles, before Read File","comments":0,"category":"Show and tell","created_at":"2026-10-27T11:23:56Z"},{"number":16006,"title":"ArtiGram: publish what your flow made as a live page, via a remote MCP server","comments":0,"category":"Show and tell","created_at":"2026-10-27T08:18:45Z"},{"number":15969,"title":"Headless MCP Tools check: parsed table rows and explicit errors in LFX 1.13","comments":0,"category":"Show and tell","created_at":"2026-10-23T20:24:39Z"},{"number":15848,"title":"Langflow: OpenAI API Base, typed model names, and the server-key endpoint guard","comments":0,"category":"Show and tell","created_at":"2026-10-19T03:35:09Z"},{"number":15844,"title":"Langflow CLI included in AgentManager's tool catalog","comments":0,"category":"Show and tell","created_at":"2026-10-18T10:21:58Z"}],"latest_release":{"name":"1.13.1","tag":"v1.13.1","published_at":"2026-11-04T03:14:15Z","body":"<!-- Release notes generated using configuration in .github/release.yml at v1.13.1 -->\r\n\r\n## What's Changed\r\n### 🐛 Bug Fixes\r\n* fix(deps): backport filelock 4 upgrade to 1.13.1 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15966\r\n* fix: confine Git loader files to repository by @erichare in https://github.com/langflow-ai/langflow/pull/15972\r\n* fix(oracle): confine loader local file access by @erichare in https://github.com/langflow-ai/langflow/pull/15973\r\n* fix(security): protect MCP component reserved fields by @erichare in https://github.com/langflow-ai/langflow/pull/15974\r\n* fix(security): isolate MCP batch login and request state by @erichare in https://github.com/langflow-ai/langflow/pull/15978\r\n* fix: secure quickstart PostgreSQL configuration by @erichare in https://github.com/langflow-ai/langflow/pull/15979\r\n* fix(auth): restrict external resolver credentials by @erichare in https://github.com/langflow-ai/langflow/pull/15980\r\n* fix: require OAuth attestation for Slack workspace routing by @erichare in https://github.com/langflow-ai/langflow/pull/15981\r\n* fix: separate user and flow storage namespaces by @erichare in https://github.com/langflow-ai/langflow/pull/15982\r\n* fix: fence stale listener delivery across trigger replicas by @erichare in https://github.com/langflow-ai/langflow/pull/15942\r\n* fix(agentic): check implicit calls in component definitions by @erichare in https://github.com/langflow-ai/langflow/pull/15943\r\n* fix(models): validate unified model credential destinations by @erichare in https://github.com/langflow-ai/langflow/pull/15944\r\n* fix(mcp): validate final shell arguments after headers by @erichare in https://github.com/langflow-ai/langflow/pull/15946\r\n* fix(python): require isolation for untrusted global imports by @erichare in https://github.com/langflow-ai/langflow/pull/15945\r\n* fix: stop listeners when background consent is withdrawn by @erichare in https://github.com/langflow-ai/langflow/pull/16012\r\n* fix(security): pin agentic MCP calls to the backend listener by @erichare in https://github.com/langflow-ai/langflow/pull/16044\r\n* fix(logging): redact credentials from query strings by @erichare in https://github.com/langflow-ai/langflow/pull/16042\r\n* fix(security): validate component connection targets by @erichare in https://github.com/langflow-ai/langflow/pull/16043\r\n* fix(security): block runtime readers in generated components by @erichare in https://github.com/langflow-ai/langflow/pull/16040\r\n* fix(security): enforce MCP HTTP destination policy by @erichare in https://github.com/langflow-ai/langflow/pull/16041\r\n* fix(security): block shipped inspect re-export bypasses by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/16048\r\n* fix: preserve SSO triggers during migration replay by @erichare in https://github.com/langflow-ai/langflow/pull/16058\r\n* fix: block assistant expression evaluation bypasses by @erichare in https://github.com/langflow-ai/langflow/pull/16055\r\n* fix: absorb image dependency CVE workarounds for 1.13.1 by @erichare in https://github.com/langflow-ai/langflow/pull/16121\r\n* fix(deps): dependency upgrades for 1.13.1 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/16131\r\n### 📝 Documentation Updates\r\n* docs: clarify autologin behavior in install and quickstart by @mendonk in https://github.com/langflow-ai/langflow/pull/15968\r\n### 🛠 Maintenance Tasks\r\n* build: remove the unused MCP Fetch development dependency by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15585\r\n### ✅ Tests\r\n* test(audio): cover packaged worklet playback and startup failures by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15584\r\n* test(mcp): cover safe authenticated global and project tool listings by @erichare in https://github.com/langflow-ai/langflow/pull/16047\r\n* test(a2a): cover safe agent-card discovery after owner deactivation by @erichare in https://github.com/langflow-ai/langflow/pull/16045\r\n* test(mcp): cover component polic"},"readme":true,"readme_zh":false,"news":[{"title":"Langflow: A visual framework for building multi-agent and RAG applications","url":"https://github.com/langflow-ai/langflow","hn":"https://news.ycombinator.com/item?id=40988281","source":"Hacker News","lang":"en","date":"2024-07-17","points":1,"comments":0},{"title":"CVE-2026-9198: Langflow minted superuser tokens for anyone, then executed what they sent","url":"https://www.orcarouter.ai/blog/2026-08-06-langflow-rce-cisa-kev","source":"orcarouter.ai","lang":"en","date":"2026-10-29"},{"title":"Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts","url":"https://thehackernews.com/2026/10/langflows-critical-authenticated-rce.html","source":"The Hacker News","lang":"en","date":"2026-10-15"},{"title":"Langflow RCE under active attack months after a patch was shipped","url":"https://www.csoonline.com/article/4185063/langflow-rce-under-active-attack-months-after-a-patch-was-shipped.html","source":"CSOonline","lang":"en","date":"2026-06-14"},{"title":"LangFlow: Continuous Diffusion Rivals Discrete in Language Modeling","url":"https://huggingface.co/papers/2604.11748","source":"huggingface","lang":"en","date":"2026-04-14"},{"title":"Critical Flaw in Langflow AI Platform Under Attack","url":"https://www.darkreading.com/vulnerabilities-threats/critical-flaw-langflow-ai-platform-under-attack","source":"Dark Reading","lang":"en","date":"2026-03-26"},{"title":"CVE-2026-33017: Unauthenticated RCE in Langflow’s Public Flow Endpoint Explained","url":"https://hackernoon.com/cve-2026-33017-unauthenticated-rce-in-langflows-public-flow-endpoint-explained","source":"Hacker","lang":"en","date":"2026-03-25"},{"title":"Langflow’s AI CSV Agent Vulnerability Allows Remote Code Execution Attacks","url":"https://cybersecuritynews.com/langflows-ai-csv-agent-vulnerability/","source":"cybersecuritynews","lang":"en","date":"2026-03-03"},{"title":"Hackers Exploit Critical Langflow Flaw to Unleash Flodrix Botnet","url":"https://www.darkreading.com/vulnerabilities-threats/hackers-exploit-langflow-flaw-flodrix-botnet","source":"Dark Reading","lang":"en","date":"2025-06-17"},{"title":"Critical Langflow RCE flaw exploited to hack AI app servers","url":"https://www.bleepingcomputer.com/news/security/critical-langflow-rce-flaw-exploited-to-hack-ai-app-servers/","source":"BleepingComputer","lang":"en","date":"2025-05-06"},{"title":"Langflow CVE-2026-0768 遭利用，用于窃取 AI 密钥","url":"https://news.google.com/rss/articles/CBMieEFVX3lxTE1SSTZFbEhId0VycDg3TzAzM1BFVEtUV2lQOWJiUUd5YzBzTUdVZjJUMmhmSjU1OC0ybUhkNllwUXJkOHh3SVlsaHJ1UzhPaVUxamhqcGtDMXNjZnUzTV85UTFBUU5JOXA4WXh4Ykd2Wm03dE9TZmF0eQ?oc=5","source":"OrcaRouter","lang":"zh","date":"2026-10-26"},{"title":"MCP Supply Chain Advisory: RCE Vulnerabilities Across the AI Ecosystem","url":"https://news.google.com/rss/articles/CBMioAFBVV95cUxNTU5iSmR0UnY4OTJCTXVXWTlTTWZnOWo2MHJINTRTR1hVaTZyc255QTBraFBmanJTcldySWtnMTlyTzFVaFBTbHlNUVdPb1dCS3BWaGR5YWZuU0JEcU1UR09qdTVVZTl6NTBPMW1YRjVXaGpUMi1sQU5lOGFsQVR2TFRTTURYUzdNRWVJR2RSUVFlTk1DNjBUdWVRdlBlSzlm?oc=5","source":"OX Security","lang":"en","date":"2026-04-15"},{"title":"国家漏洞库CNNVD：人工智能重要漏洞通报（2026年第四期）","url":"https://news.google.com/rss/articles/CBMiTkFVX3lxTFBUMnBDdGNBcjZIX1Y5SnZrek9VbXZyNjgyR0RwSFlQb18zUkk4V0NxTXVzWV9FTURSSjFzUGFWRnk4c3kyQnE3M2JYaE5Jdw?oc=5","source":"安全内参","lang":"zh","date":"2026-04-02"},{"title":"从原型到生产：Langflow 和 IBM watsonx Orchestrate 简化智能体式工作流","url":"https://news.google.com/rss/articles/CBMiqwFBVV95cUxNanl2dndSRFFIb0VXeHRycnlEZWpVTEU3czBWNVpncjZsWEZXbElFckZJdlc3WTdWOTA5M3BQd2tfVGRuekRaMXJFQmhMTkpNd193YmRiZzUxbW12c0FqaHV1cVlzWVMzeWJWUm9ScmdkMFY5SFdZWG12cXFhYUZCUVZOVHAxekg0Qm5RMU80Mlp5TE5KX1VRdTBnVk5FMlNOdXI3Nm42T2trME0?oc=5","source":"IBM","lang":"zh","date":"2025-12-10"},{"title":"2025年AI Builder 工具箱：20 个开源神器让你效率飙升","url":"https://news.google.com/rss/articles/CBMiTEFVX3lxTFBqR1hLMXJIOHBYVVVXLTVXRlBsQ21pbnNIWjBUQnBhSnU3aEJ6eWxlNzYtcHJpd05xUUxjZ2dCNWZ0VmU5MjYwZzZ2OGM?oc=5","source":"51CTO","lang":"zh","date":"2025-09-08"},{"title":"Develop Agentic AI Workflows with Langflow and Oracle Database MCP, Vector RAG, NL2SQL/","url":"https://news.google.com/rss/articles/CBMi3wFBVV95cUxPZW9lSlV6ZmhMY2VYbThMMFFoU3NNT3NRcHhtM3NaNHdSZmFjZklNLU1saGZCeTctdUY0TlBVSEZVWFdNZDRfdDhYNDQza1ZlcEgwZlNrZ3I1NVZlc0xEeDYtdlFZVUV1N0tkWVcwNkZ0ZUFUWk5GRjhsUndKeWJqUUc0OWFTVHFxY2gyZnRsMUg1VlBiOEZTbm9wOHRCc3FZNUtZZ2lfOEpBbjZZbVlScnV0ZGx5XzlWSzl6MHY3TGFkbGdXUFVkSHVyNzNOaFlwUF8xZDYxYi1fdHM1WW8w?oc=5","source":"Oracle Blogs","lang":"en","date":"2025-08-18"},{"title":"Hackers Weaponize Langflow Vulnerability to Launch Flodrix Botnet","url":"https://news.google.com/rss/articles/CBMicEFVX3lxTE9LN09KeTJMZ2RtZm5NR0dOVkc3Q2t0SW1TWVdwNzBKb00xTHRBTWdkTTNVWDZobS1nTWdrcnNFNWtoZ1F4Sno1RnM0eU1IX1BDTDc1UVhMQ29MOTFLekd3bVYtQ1FCcldwa0JPU2U2SW0?oc=5","source":"GBHackers News","lang":"en","date":"2025-06-17"},{"title":"Langflow AI Builder Vulnerability Allows Full Server Compromise by Remote Attackers","url":"https://news.google.com/rss/articles/CBMiaEFVX3lxTE1mMEJGMldXWlcyNThtVG1BUkIzMm1WaWVKbzc1WEFpTktxalBqbHViZjZTTDRfc3JQRTQ5ZTdleFFHb0tCVmJTaGtxWEhHVk9QNXNlR2xjTFlKWkFOelpqVVdQWHU5Uk9j0gFoQVVfeXFMTWYwQkYyV1daVzI1OG1UbUFSQjMybVZpZUpvNzVYQWlOS3FqUGpsdWJmNlNMNF9zclBFNDllN2V4UUdvS0JWYlNoa3FYSEdWT1A1c2VHbGNMWUpaQU56WmpVV1BYdTlST2M?oc=5","source":"Cyber Press","lang":"en","date":"2025-04-10"},{"title":"让AI真正落地，LangFlow、Dify与Coze要怎样选择呢？","url":"https://news.google.com/rss/articles/CBMiZEFVX3lxTE5zb2FxWFpvMjk3NGFIanRjT0VRQ0FqNEowaHVvbDhoMVlZcTBYT1NzYTg4UXRHOUtHMnFmVTRiTEdITEduYjJFQUt1ZS1wX3liaVE2NW1NUVBPUS1TMjlZOGt5V2g?oc=5","source":"53AI","lang":"zh","date":"2025-03-15"}],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}