5 matches found
CVE-2026-69264
creationtimestamp| type| source ---|---|--- 2026-08-04 18:35:05+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4j8x-x6v7-w9rq 2026-08-04 19:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpuojef22m 2026-08-06...
CVE-2026-69264
Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that is then executed by Pyodide. Because Pyodide is loaded with the default js bridge to globalThis, which on Node.js exposes eval and dynamic import,...
CVE-2025-69264
pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature "Dependency lifecycle scripts execution disabled by default". While pnpm v10 blocks postinstall scripts via the...
CVE-2025-69264
creationtimestamp| type| source ---|---|--- 2026-01-07 00:38:31+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-379q-355j-w6rj 2026-01-07 23:09:29+00:00| seen| Telegram/FpDGAESLT2b6cAqL19jI0amMTjRd3R14Wu3P5pTmHCNxdqI 2026-01-07 23:11:17+00:00| seen|...
