{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.12"}],"component":"langflow","cve_ids":["CVE-2024-42835"],"ecosystem":"PyPI","epss":0.01164,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-56m6-4mhw-h3g5","id":"tcs_01M5KGMWX92HP4KVR6ERDECXA3","modified_at":"2026-06-10T17:01:58.623738893Z","published_at":"2024-10-31T14:15:05.610Z","references":["https://osv.dev/vulnerability/PYSEC-2024-279","https://github.com/langflow-ai/langflow/issues/2908","https://github.com/advisories/GHSA-56m6-4mhw-h3g5"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-279","url":"https://osv.dev/vulnerability/PYSEC-2024-279"}],"summary":"langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component."}