CVE-2026-90534: Authorization Bypass Through User-Controlled Key

Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-level permission check and invokes component loadMethods with an attacker-controlled nodeName, loadMethod, inputs, and...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, crossplane-provider-aws-elasticache, terraform-provider-tls, kubernetes, nuclei, aactl, cloudflared, podman, glab, gh, chisel, splunk-otel-collector, crossplane-provider-aws-ec2, zot, buildkitd, apko, argo-events,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: caddy, crossplane-provider-azure-securityinsights, falco-no-driver, kargo, crossplane-provider-aws-sns-fips, terraform-provider-azurerm-fips, cert-manager, crossplane-provider-aws-kinesis-fips, crossplane-provider-azure-streamanalytics, gptscript,...

EUVD-2023-38198

Malicious code in bioql PyPI...

CVE-2023-34085

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...

Cross site request forgery (csrf)

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...

CVE-2023-34085: Exposure of Private Personal Information to an Unauthorized Actor

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...

MAL-2023-1245 Malicious code in nequi-aws-dynamodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86e69f8ab2fe8a36bf3ee2e573ff2b19bb88d7dc072bd33275d8b8194b9b06dc The OpenSSF Package Analysis project identified 'nequi-aws-dynamodb' @ 1.3.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in nequi-aws-dynamodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86e69f8ab2fe8a36bf3ee2e573ff2b19bb88d7dc072bd33275d8b8194b9b06dc The OpenSSF Package Analysis project identified 'nequi-aws-dynamodb' @ 1.3.1 npm as malicious. It is considered malicious because: - The package...

SyntheticSun - A Defense-In-Depth Security Automation And Monitoring Framework Which Utilizes Threat Intelligence, Machine Learning, Managed AWS Security Services And, Serverless Technologies To Continuously Prevent, Detect And Respond To Threats

SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. You sleep in fragmented glass With reflections o...