1 results (0.001 seconds)
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2024-37014
https://notcve.org/view.php?id=CVE-2024-37014
Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/custom_component" endpoint and provide a Python script. Langflow hasta la versión 0.6.19 permite la ejecución remota de código si los usuarios que no son de confianza pueden acceder al endpoint "POST /api/v1/custom_component" y proporcionar un script de Python. • https://github.com/langflow-ai/langflow/issues/1973 • CWE-94: Improper Control of Generation of Code ('Code Injection') •