Threats tagged 'ghsa-pprg-5xr3-4qr4'

A command injection vulnerability exists in langflow-ai langflow up to version 1.8.4 in the CodeParser.parse_callable_details function within the Full Builtins Module Handler component. This vulnerability allows remote attackers to execute arbitrary commands. The issue has been publicly disclosed with exploit details available, but the vendor has not responded or issued a fix.