| Package | Affected versions | Patched versions |
|---|---|---|
| langflow | ≥ 1.0.0, < 1.12.4 | 1.12.4 |
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the system due to the deserialization of untrusted data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free