Archive // 2025-12

December 2025

Everything the feeds carried with a date in December 2025: still live, or dropped out of the rolling window since. Changes to a CVE's severity, score or exploited status are listed under it.

CVE 05 Dec 2025
CVE-2025-34291 Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS…
High 8.8Exploitedfirst seen 04 Oct 2026live