Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts, which uses a regex-based blocklist to sanitize LLM-generated Python code before...