Threats affecting pkg:pypi/ibm-langflow-oss

IBM Langflow OSS versions 1.0.0 through 1.10.1 contain an improper input validation vulnerability in the PythonREPL sandbox implementation. This vulnerability is classified under CWE-94, indicating issues with code injection or unsafe evaluation of input. The vulnerability has a critical severity rating based on the CVSS 3.1 vector provided, which indicates network attack vector, low attack complexity, privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.