Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-37014

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qg33-x2c5-6p44

Langflow remote code execution vulnerability Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.

gitlab/pypi/langflow/CVE-2024-37014

Langflow remote code execution vulnerability Langflow allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.

pypa/langflow/PYSEC-2024-177

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.

pysec/PYSEC-2024-177

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script.