Description
langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | langflow | <= 1.0.12 | — | GHSA-56m6-4mhw-h3g5 |
Critical · 9.8
CVE-2024-42835
EUVD-2024-2942GHSA-56m6-4mhw-h3g5PYSEC-2024-279
langflow has vulnerability in PythonCodeTool component
Published Oct 31, 2024 · Updated Mar 27, 2026 · Assigned by mitre