| Package | Affected versions | Patched versions |
|---|---|---|
| langflow | ≥ 1.0.0, < 1.12.3 | 1.12.3 |
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command ('Code Injection'), aka improper control of code generation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free