langflow has vulnerability in PythonCodeTool component

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-42835 · ADVISORY
• langflow-ai/langflow · WEB
• langflow-ai/langflow · PACKAGE
• pypa/advisory-database · WEB
• GitHub Advisory GHSA-56m6-4mhw-h3g5 · ADVISORY

langflow のその他の脆弱性

• GHSA-j8f7-x8jm-wmm4中Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant…
• CVE-2026-105741高 7.1Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the …
• CVE-2026-105699高 7.1Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the …
• CVE-2026-105698中 5.4Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownersh…
• CVE-2026-105697緊急 9.9Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched what…