copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-41271 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-41271 Source advisory: MEND:CVE-2026-41271...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-41270 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-41270 Source advisory: MEND:CVE-2026-41270...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-41268 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-41268 Source advisory: MEND:CVE-2026-41268...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-41137 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-41137 Source advisory: MEND:CVE-2026-41137...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-41138 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-41138 Source advisory: MEND:CVE-2026-41138...

SUSE-SU-2026:21290-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: improper validation of color component counts when processing a specially crafted JPEG image can lead to a heap buffer overflow bsc1261210...

PT-2026-34736

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery SSRF vulnerability exists in FlowiseAI's POST/GET API Chain components that allows unauthenticated attackers to force the server to make arbitrary HTTP requests t...

CVE-2026-41341: Insufficient Type Distinction

OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-components-helpers.ts. Attackers can exploit this misclassification to bypass group DM policy enforcement o...

Oracle Critical Patch Update, April 2026 Security Update Review

Oracle released its second quarterly edition of this year’s Critical Patch Update. The update received patches for 481 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families,...

CVE-2026-31455

In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfsunmountflushinodes pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issues -...

Exploit for Deserialization of Untrusted Data in Facebook React

flight-risk flight risk /flaɪt rɪsk/ — React's Flight...

SUSE CVE-2026-6746

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

uutils coreutils 安全漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a security vulnerability, which stems from a race condition in split. This condition may allow local attackers to manipulate variable path components, causing split to truncate and...

CVE-2026-22019

Vulnerability in the PeopleSoft Enterprise HCM Shared Components product of Oracle PeopleSoft component: Person Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise H...

UBUNTU-CVE-2026-35249

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

copilot-studio-datainsight (>=0.0.1, <=0.0.6), flowise (>=1.6.1, <=1.8.4) potentially affected by CVE-2026-40933 via flowise-components (>=1.3.4, <=1.8.6)

flowise-components NPM version =1.3.4, =0.0.1, =1.6.1, =1.8.4 Source cves: CVE-2026-40933 Source advisory: MEND:CVE-2026-40933...

Incomplete List of Disallowed Inputs

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the run function of the CSVAgents class when evaluating LLM-generated Python scripts in a pyodide environment without sufficient sandboxing. An attack...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.0.10

Red Hat OpenShift Service Mesh 3.0.10 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

CVE-2026-6762

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

CVE-2026-6762 Spoofing issue in the DOM: Core & HTML component

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...