Langflow 代码注入漏洞

Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Prior to Langflow 1.9.0, there was a code injection vulnerability. This vulnerability stemmed from the Agentic Assistant feature, which executed Python code generated by the LLM...

CVE-2021-47128 bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks

In the Linux kernel, the following vulnerability has been resolved: bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks Commit 59438b46471a "security,lockdown,selinux: implement SELinux lockdown" added an implementation of the lockeddown LSM hook to SELinux, with the aim to restric...

Microsoft Releases New SDL Security Tools

Microsoft’s Security Development Lifecycle SDL team has released two new security tools to help developers test and verify the security of software programs. The tools — BinScope Binary Analyzer and MiniFuzz File Fuzzer — are available for download at no cost. The BinScope Binary Analyzer can be...