Defined in 2 files
Last patched
upload_file in langflow-ai/langflow was changed by 4 published CVE fixes in 2026, in 4 distinct patches that added or removed 33 lines in total.
The name occurs in 2 files: src/lfx/src/lfx/load/utils.py, src/backend/base/langflow/api/v1/files.py.
langflow-ai/langflow has 23 CVEs with a located fix in total, so 17% of them touched this function.
Every published CVE whose fix changed upload_file, newest first, with the lines each fix touched.
CVE-2026-55446 · src/backend/base/langflow/api/v1/files.py · lines 43–58 · +6 −0 in 2 hunks
CVE-2026-55450 · src/lfx/src/lfx/load/utils.py · lines 48–75 · +9 −2 in 2 hunks
CVE-2026-6596 · src/lfx/src/lfx/load/utils.py · lines 48–75 · +9 −2 in 2 hunks
CVE-2026-21445 · src/backend/base/langflow/api/v1/files.py · lines 80–93 · +1 −4 in 2 hunks
Get an alert when the next CVE fix lands in langflow-ai/langflow, with the patched functions.
Monitor langflow CVEsFunctions in the same files that CVE fixes also changed.
Functions in langflow-ai/langflow changed by the most CVE fixes.
Common questions about CVE fixes to upload_file.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
