171504 matches found
CVE-2026-69263 Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, and NODEOPTIONS by exact...
ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in PyJWT - Patched by Root
Root has patched CVE-2026-32597 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
CVE-2026-69254
CVE-2026-69254 affects Flowise versions before 3.1.3. The issue arises in the executeJavaScriptCode() path where caller-provided nodeVMOptions are merged with default NodeVM security settings, allowing an attacker to override the sandbox protection. By reaching packages/server/src/routes/node-cus...
ROOT-APP-NPM-CVE-2021-43307 CVE-2021-43307 in semver-regex - Patched by Root
Root has patched CVE-2021-43307 in the semver-regex package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-45296 CVE-2024-45296 in path-to-regexp - Patched by Root
Root has patched CVE-2024-45296 in the path-to-regexp package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3449 CVE-2026-3449 in @tootallnate/once - Patched by Root
Root has patched CVE-2026-3449 in the @tootallnate/once package for Root:npm. Multiple fixed versions available...
CLSA-2026-1785554486 TuxCare security update for guzzlehttp/psr7 (2 CVEs)
TuxCare rebuilt guzzlehttp/psr7 to address 2 CVEs. Fixed in 1.4.2-p2+tuxcare...
CLSA-2026-1785291650 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.24.0-tuxcare.4...
CLSA-2026-1785380784 TuxCare security update for org.apache.logging.log4j (1 CVE)
TuxCare rebuilt 30 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.22.1-tuxcare.3...
CLSA-2026-1785291369 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.2.15-tuxcare.2...
CLSA-2026-1785380788 TuxCare security update for protobufjs (3 CVEs)
TuxCare rebuilt protobufjs to address 3 CVEs. Fixed in 1.5.1-tuxcare.1...
CLSA-2026-1785117460 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.0.24-tuxcare.3...
CLSA-2026-1785204340 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.1.0-tuxcare.3...
CLSA-2026-1784856398 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 0.21.1-tuxcare.2...
CLSA-2026-1784856450 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.5.6-tuxcare.3...
CLSA-2026-1784769620 TuxCare security update for svelte (1 CVE)
TuxCare rebuilt svelte to address 1 CVE. Fixed in 0.3.0-tuxcare.2...
CLSA-2026-1784856428 TuxCare security update for axios (3 CVEs)
TuxCare rebuilt axios to address 3 CVEs. Fixed in 1.7.5-tuxcare.3...
CLSA-2026-1784856415 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.3-tuxcare.6...