Threats tagged 'ghsa-5rwq-2vwh-7g73'

langflow-ai langflow version 1.8.4 and earlier contains a directory traversal vulnerability in the knowledge base creation HTTP endpoint. This flaw allows an attacker to write or overwrite files outside the intended workspace by supplying absolute file paths. The vulnerability arises from insufficient boundary enforcement on user-controlled input in the HTTP POST handler for creating knowledge bases.