Threats tagged 'ghsa-56h6-99v2-hc4g'

IBM Langflow OSS versions 1.0.0 through 1.12.3 contain a vulnerability that allows remote attackers who can access the message broker to execute arbitrary code via deserialization of untrusted data. This flaw is identified as CWE-502 and has a high severity score of 8.1. The vulnerability requires network access with high attack complexity and no privileges or user interaction. No public exploits or patches are currently documented.