72360 matches found
CVE-2026-56270
Flowise before 3.1.0 versions 3.0.13 and earlier contains a missing authentication vulnerability in the /api/v1/loginmethod endpoint that allows unauthenticated users to retrieve an organization's complete SSO configuration, including OAuth client secrets in cleartext, by providing an...
EUVD-2026-38739
Capgo before 12.128.2 fails to enforce limitedtoorgs and limitedtoapps constraints on subkeys provided via x-limited-key-id header in middlewareKey function. Attackers can bypass subkey scope restrictions by referencing their own subkeys, causing all downstream route handlers to use the...
CVE-2025-71332 Flowise - SQL Injection in importChatflows API via chatflow.id Parameter
Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API. Due to insufficient validation of the chatflow.id value, an authenticated user can supply a crafted JSON import file whose id field is concatenated unsanitized into a SQL IN clause, allowing arbitrary SQL to ...
MINI-RRR5-VW6C-FFMW
Bulletin has no description...
MINI-R357-3JV5-MG5V
Bulletin has no description...
MINI-VWJX-PQJW-GJ79
Bulletin has no description...
MINI-6C6J-RX8R-M78P
Bulletin has no description...
MINI-7G6G-3CJ6-8M4J
Bulletin has no description...
MINI-JH98-W3H2-V3W8
Bulletin has no description...
MINI-Q4M3-2538-2P99
Bulletin has no description...
MINI-HGF8-G2WW-6F3J
Bulletin has no description...
MINI-599F-FP8M-925W
Bulletin has no description...
MINI-X2MM-QJ22-9463
Bulletin has no description...
MINI-F5FV-957G-4QRH
Bulletin has no description...
MINI-V3GF-756C-VG6Q
Bulletin has no description...
MINI-F35J-3977-8456
Bulletin has no description...
MINI-FVFM-RH86-J82Q
Bulletin has no description...
MINI-VRMW-94GV-F5HQ
Bulletin has no description...