langflow@1.12.0.dev19

A Python package with a built-in web application

1.12.0.dev20

3 years ago

10 hours ago

Known vulnerabilities in the langflow package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Arbitrary Code Injection langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection in the `Bundle URL Loader` process. An attacker can execute arbitrary code by supplying crafted input to this component. How to fix Arbitrary Code Injection? There is no fixed version for `langflow`.	[1.9.0,)
H Arbitrary Code Injection langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection through any components that provided the code functionality running on the local machine rather than a sandboxed environment. An attacker can execute arbitrary code on the host system by injecting malicious code into the components. How to fix Arbitrary Code Injection? There is no fixed version for `langflow`.	[0,)
C Arbitrary Code Injection langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Arbitrary Code Injection via the `PythonCodeTool` component, due to a lack of validations. How to fix Arbitrary Code Injection? There is no fixed version for `langflow`.	[0,)