Improper Input Validation Affecting langflow package, versions [,1.0.0a37)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-LANGFLOW-7361803
- published 24 Jun 2024
- disclosed 1 Jun 2024
- credit Unknown
How to fix?
Upgrade langflow to version 1.0.0a37 or higher.
Overview
langflow is an A Python package with a built-in web application
Affected versions of this package are vulnerable to Improper Input Validation via an unsecure /custom_component/reload endpoint.