Arbitrary Code Injection

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Arbitrary Code Injection via validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts, which uses a regex-based blocklist to sanitize LLM-generated Python code before execution in...