jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils We define crons. And support them. cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. The project follows the Semantic Versioning Convention, provides OSGi metadata and uses Apache 2.0 license. Download cron-utils...

CVE-2025-41269

creationtimestamp| type| source ---|---|--- 2026-05-29 13:02:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmylu2roej2g 2026-06-22 06:46:44+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mouc2qsevs2f...

CVE-2025-41269

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating...

CVE-2025-41269

The CVE-2025-41269 entry describes a remote OS Command Injection (CWE-78) affecting Waterfall WF-500 Series controllers: Console WebUI on TX/RX Hosts, version 7.9.1.0 R2502171040. Root cause is improper neutralization of special elements in the OS command execution path, permitting remote unauthe...

CVE-2026-41269

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow the application/javascript MIME type. This lets an attacker upload .js files even though the frontend doesn’t normally...

CVE-2026-41269 Flowise: File Upload Validation Bypass in createAttachment

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow the application/javascript MIME type. This lets an attacker upload .js files even though the frontend doesn’t normally...

CVE-2026-41269 Flowise: File Upload Validation Bypass in createAttachment

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the Chatflow configuration file upload settings can be modified to allow the application/javascript MIME type. This lets an attacker upload .js files even though the frontend doesn’t normally...

CVE-2026-41269

creationtimestamp| type| source ---|---|--- 2026-04-15 21:42:59+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rh7v-6w34-w2rr 2026-04-23 21:26:31+00:00| seen| Telegram/BiTM4VWQdbYmMG43-mv447qo5-YjFbOvUme2BKAYDCNPPw...

CVE-2021-41269

creationtimestamp| type| source ---|---|--- 2025-08-22 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwze4venpz2c...

CVE-2023-41269

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 2.2.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

com.cronutils:cron-utils-spring (1.0.1), de.skuzzle.inject:guice-async-extension (>=0.1.0, <=0.3.0) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (3.1.6)

com.cronutils:cron-utils MAVEN version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.cronutils:cron-utils-spring 1.0.1 - de.skuzzle.inject:guice-async-extension =0.1.0, =0.0.2, =0.0.4 Source...

com.northernwall:hadrian (>=1.6.14, <=1.9.1) potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (5.0.1)

com.cronutils:cron-utils MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.northernwall:hadrian =1.6.14, =1.9.1 Source cves: CVE-2021-41269 Source advisory: OSV:GHSA-P9M8-27X8-RG87...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +234 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (>=9.0.0, <=9.1.5)

com.cronutils:cron-utils MAVEN version =9.0.0, =0.0.2, =0.0.21, =0.0.1, =0.1.2, =0.0.1, =1.2.19, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.6 and more Source cves: CVE-2021-41269 Source advisory: OSV:GHSA-P9M8-27X8-RG87...

pl.touk.nussknacker:nussknacker-management-sample_2.11 (>=0.1.0, <=0.3.0), pl.touk.nussknacker:nussknacker-management-sample_2.12 (>=0.1.0, <=0.3.0) +2 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (3.1.1)

com.cronutils:cron-utils MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - pl.touk.nussknacker:nussknacker-management-sample2.11 =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.2 Source cves:...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +234 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (>=9.0.0, <=9.1.5)

com.cronutils:cron-utils MAVEN version =9.0.0, =0.0.2, =0.0.21, =0.0.1, =0.1.2, =0.0.1, =1.2.19, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.1.6 and more Source cves: CVE-2021-41269 Source advisory: GHSA-P9M8-27X8-RG87...

org.hswebframework:hsweb-task-cluster (1.0.0-rc), org.hswebframework:hsweb-task-core (1.0.0-rc) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (7.0.5)

com.cronutils:cron-utils MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - org.hswebframework:hsweb-task-cluster 1.0.0-rc - org.hswebframework:hsweb-task-core 1.0.0-rc -...

com.thinkbiganalytics.kylo.plugins:kylo-sla-email (>=0.9.1, <=0.10.0), com.thinkbiganalytics.kylo:kylo-metadata-modeshape (0.9.1) +1 more potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (2.0.0)

com.cronutils:cron-utils MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - com.thinkbiganalytics.kylo.plugins:kylo-sla-email =0.9.1, =0.9.1, =0.10.0 Source cves: CVE-2021-41269 Source...

de.viadee:viadeeprocessapplicationvalidator (2.2.1) potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (6.0.2)

com.cronutils:cron-utils MAVEN version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - de.viadee:viadeeprocessapplicationvalidator 2.2.1 Source cves: CVE-2021-41269 Source advisory:...

de.viadee:viadeeprocessapplicationvalidator (>=2.2.3, <=2.4.0) potentially affected by CVE-2021-41269 via com.cronutils:cron-utils (6.0.3)

com.cronutils:cron-utils MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.cronutils:cron-utils and may be impacted: - de.viadee:viadeeprocessapplicationvalidator =2.2.3, =2.4.0 Source cves: CVE-2021-41269 Source advisory:...