v1.9.3

OtterMind/Chat2DBv1.9.3May 15, 2026by github-actions[bot]

AI Summary

A critical security release addressing SSRF vulnerabilities and CVEs, alongside the addition of Python 3.14 support and various stability improvements.

Key Highlights

  • Critical security fixes (SSRF protection, CVEs)
  • Python 3.14 support
  • Updated langchain-classic to 1.0.7
  • Stabilized model toggle and Agent dropdown behavior
  • Pinning PostgreSQL image to bookworm

New Features

  • SSRF protection
  • Python 3.14 support

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v1.9.3 -->

## 🔒 Security Release - Critical Updates

This release includes **critical security fixes**. We strongly recommend upgrading to v1.9.3 immediately.

**Security Fixes:**
- SSRF vulnerability protection (LE-763)
- CVE fixes from MEND/CIMS scans (LE-1123)
- Updated security dependencies including langchain-classic to 1.0.7

## What's Changed
### ✨ New Features
* feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in https://github.com/langflow-ai/langflow/pull/13016
* feat: Python 3.14 support by @erichare in https://github.com/langflow-ai/langflow/pull/13085
### 🐛 Bug Fixes
* fix: update security dependencies by @Jkavia in https://github.com/langflow-ai/langflow/pull/13053
* fix: pin postgres image to bookworm in docker_example by @erichare in https://github.com/langflow-ai/langflow/pull/13027
* fix: stabilize model toggle and refresh Agent dropdown after provider changes by @erichare in https://github.com/langflow-ai/langflow/pull/13113
* fix: upgrade langchain-classic to 1.0.7 by @Jkavia in https://github.com/langflow-ai/langflow/pull/13130
* fix: backport policies ToolGuard lazy imports by @erichare in https://github.com/langflow-ai/langflow/pull/13144
### 📝 Documentation Updates
* docs: SSRF protection enabled by default by @mendonk in https://github.com/langflow-ai/langflow/pull/13106
### Others
* chore: Add DESIGN.md for Langflow's visual design system by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12830

## 📦 Package Versions
- **langflow**: 1.9.3
- **langflow-base**: 0.9.3
- **lfx**: 0.4.3
- **langflow-sdk**: 0.1.3

## 📥 Installation
```bash
pip install langflow==1.9.3
```

## 🐳 Docker Images
```bash
docker pull langflowai/langflow:1.9.3
docker pull langflowai/langflow:latest
```

**Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.9.2...v1.9.3