AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

LangflowGHSA-355v-2rjx-fpx7

Inefficient Regular Expression Complexity in langflow

Langflow

CVE-2024-9277 · Published Sep 27, 2024 · updated Jul 7, 2026

Medium3.5
No fix yet
GitHub advisory

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file \src\backend\base\langflow\interface\utils.py of the component HTTP POST Request Handler. The manipulation of the argument remaining_text leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected versions

PackageAffectedFixed in
langflow
PyPI
<= 1.0.18No fix yet
Details and references

More Langflow advisories

All Langflow