langflow has vulnerability in PythonCodeTool component

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-42835 · ADVISORY
• langflow-ai/langflow · WEB
• langflow-ai/langflow · PACKAGE
• pypa/advisory-database · WEB
• GitHub Advisory GHSA-56m6-4mhw-h3g5 · ADVISORY

langflow의 다른 취약점

• GHSA-j8f7-x8jm-wmm4보통Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant…
• CVE-2026-105741높음 7.1Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the …
• CVE-2026-105699높음 7.1Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the …
• CVE-2026-105698보통 5.4Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownersh…
• CVE-2026-105697심각 9.9Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched what…