PYSEC-2024-177

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

PT-2024-27242 · Langflow · Langflow

Name of the Vulnerable Software and Affected Versions: Langflow versions 0.6.19 and earlier Description: The issue allows remote code execution if untrusted users can reach the "POST /api/v1/custom component" endpoint and provide a Python script. Recommendations: For Langflow versions 0.6.19 and...

Langflow Security Vulnerabilities

Langflow is a visualization framework for building multi-agent and RAG applications from the Langflow open source. A security vulnerability exists in Langflow version 0.6.19 that originates if an untrusted user can reach the POST /api/v1/customcomponent endpoint and provide a Python script, then...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

CVE-2024-37014

CVE-2024-37014 affects Langflow up to version 0.6.19. The vulnerability allows remote code execution when an untrusted user can access the endpoint POST /api/v1/custom_component and provide a Python script. The cited sources describe this vector and the resulting arbitrary code execution, with im...

bashbuddy (>=0.2.0 <=0.2.1), boilerplate-x (>=0.1.1 <=0.2.8) +23 more potentially affected by CVE-2023-29374 via langchain (>=0.0.100 <=0.0.131)

langchain PYPI version =0.0.100, =0.2.0, =0.1.1, =0.0.0, =0.1.0, =0.0.1, =0.0.4, =10.9.15, =0.1.3, =0.3.0, =0.0.1, =0.0.13, =0.0.1, =0.0.40, =0.1.1, =0.0.1, =0.0.7 and more Source cves: CVE-2023-29374 Source advisory: OSV:GHSA-FPRP-P869-W6Q2...