{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.12"}],"component":"langflow","cve_ids":["CVE-2024-42835"],"ecosystem":"PyPI","epss":0.01164,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-56m6-4mhw-h3g5","id":"tcs_01M5KF05Y36MBBFQPD6XGTE0WR","modified_at":"2026-06-06T00:45:45.734704195Z","published_at":"2024-10-31T15:30:59Z","references":["https://osv.dev/vulnerability/GHSA-56m6-4mhw-h3g5","https://nvd.nist.gov/vuln/detail/CVE-2024-42835","https://github.com/langflow-ai/langflow/issues/2908","https://github.com/langflow-ai/langflow","https://github.com/pypa/advisory-database/tree/main/vulns/langflow/PYSEC-2024-279.yaml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-56m6-4mhw-h3g5","url":"https://osv.dev/vulnerability/GHSA-56m6-4mhw-h3g5"}],"summary":"langflow has vulnerability in PythonCodeTool component"}