8 matches found
EUVD-2025-10669
Malicious code in bioql PyPI...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
GHSA-GJX9-WG9X-7GVP Flowise Vulnerable to SQL Injection via `tableName` Parameter
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
Flowise Vulnerable to SQL Injection via `tableName` Parameter
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189: Improper Neutralization of Special Elements used in an SQL Command
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise versions 2.2.3 and earlier are vulnerable to an SQL Injection flaw. The root cause is the improper neutralization of special elements within the tableName parameter used at Postgres_VectorStores . This vulnerability could allow an attacker to perform unauthorized database actions or acces...