858 matches found
EUVD-2014-0212
Malware in sbrugna...
EUVD-2021-12812
Malware in sbrugna...
EUVD-2021-2467
Malware in sbrugna...
EUVD-2021-13970
Malware in sbrugna...
EUVD-2020-26056
Malware in sbrugna...
EUVD-2018-12084
Malware in sbrugna...
EUVD-2020-26118
Malware in sbrugna...
EUVD-2020-25897
Malware in sbrugna...
EUVD-2017-10494
Malware in sbrugna...
EUVD-2018-12147
Malware in sbrugna...
EUVD-2020-26050
Malware in sbrugna...
Cross-site Scripting (XSS)
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the workflow UI View Messages feature in the admin panel. An attacker can execute arbitrary JavaScript in the context of an administrator's browser by injecting a specially...
GHSA-964P-J4GG-MHWC Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
EUVD-2022-46980
Malicious code in bioql PyPI...
EUVD-2024-0783
Malicious code in bioql PyPI...
EUVD-2025-29210
Malicious code in bioql PyPI...
EUVD-2024-2617
Malicious code in bioql PyPI...