langflow-ai/langflow v1.10.3

1.10.3

on GitHub

What's Changed

🐛 Bug Fixes

• fix(docker): remove broken npm self-upgrade by @erichare in #14052
• fix(security): protect Docling Serve outbound requests by @erichare in #14033
• fix(auth): verify current password on password changes by @erichare in #14034
• fix(security): harden MCP stdio configuration by @erichare in #14036
• fix(security): harden component code module access by @erichare in #14032
• fix: correct deprecated model settings behavior by @erichare in #14047
• fix(voice): enforce flow authorization on websocket by @erichare in #14043
• fix(security): block native FFI imports in generated code by @erichare in #14040
• fix(security): confine AssemblyAI audio file access by @erichare in #14037
• fix: track assignment aliases in component code scanner by @erichare in #14041
• fix(kb): enforce per-user component path containment by @erichare in #14065
• fix(security): consolidate release-1.10.3 hardening backports by @erichare in #14071
• fix(security): protect SQL runtime configuration by @erichare in #14076
• fix(kb): enforce server-owned folder connector limits by @erichare in #14039
• fix(lfx): deduplicate Google embedding model aliases by @erichare in #14081
• fix: expose stable Langfuse trace IO for evaluators by @erichare in #14087
• fix(voice): preserve public flow websocket access by @erichare in #14097
• fix(security): require docker run for MCP stdio by @erichare in #14122
• fix(security): block indirect component code bypasses by @erichare in #14121
• fix(security): close remaining indirect code bypasses (1.10.3) by @erichare in #14132
• fix(security): compare API keys in constant time by @erichare in #14127
• fix(security): redact secret component inputs from traces by @erichare in #14128
• fix(security): bind MCP SSE sessions to users by @erichare in #14129
• fix(security): default access token cookie to HttpOnly by @erichare in #14131
• fix(security): rate limit public flow builds (1.10.3) by @erichare in #14134
• fix(security): isolate lfx serve request logs by @erichare in #14130
• fix(security): bind MCP stdio to code-exec lockdown by @erichare in #14149

✅ Tests

• test(mcp): isolate timeout tests from SSRF validation by @erichare in #14075

Others

• chore: bump versions by @Adam-Aghili in #14077

Full Changelog: v1.10.2...v1.10.3