Skip to content
OpenAdvisories

Package · PyPI

langflow

43 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Critical 9.8
    CVE-2024-42835

    langflow has vulnerability in PythonCodeTool component

    langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.

    langflow PyPI
  • Low 3.5
    CVE-2024-9277

    Langflow HTTP POST Request utils.py redos

    A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of …

    langflow PyPI
  • High 8.8
    CVE-2024-37014 Scanner template EPSS 64%

    Langflow remote code execution vulnerability

    Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.

    langflow PyPI