| Package | Affected versions | Patched versions |
|---|---|---|
| langflow | ≥ 1.0.0, < 1.11.6 | 1.11.6 |
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free