143681 matches found
Flowise RCE via SQLite Record Manager Node
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: FlowiseAI/Flowise 3.1.2 I. Background Flowise AI is an open-source...
CVE-2026-15307
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...
GHSA-WP74-F5HH-5F3R
creationtimestamp| type| source ---|---|--- 2026-08-04 15:32:39+00:00| seen| https://gist.github.com/alon710/2dd72db9fde8130e6ba6e6299e77ffd0...
GHSA-CVXM-645Q-P574
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
GHSA-XHF5-7WJV-PQXP
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
Flowise Sandbox Escape to RCE
============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: Luke Jahnke and Alex Brown Affects: FlowiseAI/Flowise 3.1.1, FlowiseAI/nodevm...
ROOT-APP-NPM-GHSA-W5HQ-G745-H8PQ GHSA-w5hq-g745-h8pq in uuid - Patched by Root
Root has patched GHSA-w5hq-g745-h8pq in the uuid package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-6X33-PW7P-HMPQ GHSA-6x33-pw7p-hmpq in http-proxy - Patched by Root
Root has patched GHSA-6x33-pw7p-hmpq in the http-proxy package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784856185 TuxCare security update for moment (13 CVEs)
TuxCare rebuilt moment to address 13 CVEs. Fixed in 2.0.0-tuxcare.1...
CLSA-2026-1779065204 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 7.3.5-tuxcare.1...
CLSA-2026-1776904632 TuxCare security update for uglify-js (2 CVEs)
TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 3.4.10-tuxcare.1...
CLSA-2026-1774311645 TuxCare security update for browserslist (1 CVE)
TuxCare rebuilt browserslist to address 1 CVE. Fixed in 4.13.0-tuxcare.1...
CLSA-2026-1774225211 TuxCare security update for tough-cookie (5 CVEs)
TuxCare rebuilt tough-cookie to address 5 CVEs. Fixed in 1.2.0-tuxcare.1...
GHSA-CVHV-G4RQ-3HMW
creationtimestamp| type| source ---|---|--- 2026-08-04 14:30:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7zzqhcc2s...
GHSA-8XCM-R25X-G524 vulnerabilities
Vulnerabilities for packages: prism, code-server, vitess, actions-runner, pulumi, kibana, langfuse, langfuse-fips, saf, renovate, pelias-api, npm...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: prism, code-server, vitess, actions-runner, pulumi, kibana, langfuse, langfuse-fips, saf, renovate, pelias-api, npm...
GHSA-MFX4-HV73-Q22V vulnerabilities
Vulnerabilities for packages: dask-kubernetes, py3-vllm-cuda-12.4, kserve-models-web-app, puppygraph-python, datahub-ingestion-fips, awx, py3-cassandra-medusa, tritonserver-backend-vllm-cuda-13.0, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, airflow-core, open-webui, airflo...
GHSA-954P-556P-R752 vulnerabilities
Vulnerabilities for packages: label-studio...