v1.12.7
langflow-ai/langflowv1.12.7Oct 21, 2026by github-actions[bot]
Upgrading?
Full Release Notes
<!-- Release notes generated using configuration in .github/release.yml at v1.12.7 --> ## What's Changed ### 🐛 Bug Fixes * fix(security): validate OpenSearch connector URLs by @erichare in https://github.com/langflow-ai/langflow/pull/15756 * fix(security): scope original-file S3 uploads by @erichare in https://github.com/langflow-ai/langflow/pull/15757 * fix(deps): dependency upgrades for 1.12.7 by @Adam-Aghili in https://github.com/langflow-ai/langflow/pull/15762 * fix(security): reject process and code loader capabilities by @erichare in https://github.com/langflow-ai/langflow/pull/15758 * fix(api): reconstruct workflow status without component instantiation by @erichare in https://github.com/langflow-ai/langflow/pull/15781 * fix(kb): honor environment fallback and redact connection errors by @erichare in https://github.com/langflow-ai/langflow/pull/15783 * fix(security): preserve jq conditional expressions during validation by @erichare in https://github.com/langflow-ai/langflow/pull/15782 * fix(security): block runtime object recovery in generated components by @erichare in https://github.com/langflow-ai/langflow/pull/15873 * fix(security): enforce admin policy on public component builds by @erichare in https://github.com/langflow-ai/langflow/pull/15874 * fix(security): reject runtime loader and environment capabilities by @erichare in https://github.com/langflow-ai/langflow/pull/15879 * fix: backport runtime URL prefixes and cookie isolation to 1.12.7 by @erichare in https://github.com/langflow-ai/langflow/pull/15880 * fix(security): enforce model policy in standalone builders by @erichare in https://github.com/langflow-ai/langflow/pull/15877 * fix(security): restrict non-owner graph overrides and local cleanup by @erichare in https://github.com/langflow-ai/langflow/pull/15878 * fix(security): separate saved flows from public history identifiers by @erichare in https://github.com/langflow-ai/langflow/pull/15876 * fix(deps): keep core package versions aligned on 1.12.7 by @erichare in https://github.com/langflow-ai/langflow/pull/15900 ### ✅ Tests * test(files): verify unsafe renames preserve safe downloads by @erichare in https://github.com/langflow-ai/langflow/pull/15759 **Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.12.6...v1.12.7
Related Repositories
public-apis/public-apis★ 491,126
A collective list of free APIs
NousResearch/hermes-agent★ 255,898
The agent that grows with you
yt-dlp/yt-dlp★ 199,990
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,478
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.