CVE-2025-71324

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile, where a fallback file-lookup path constructed...

CVE-2025-71324 Flowise - Arbitrary File Read via chatId Parameter

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. The chatId value is not validated and is passed to streamStorageFile, where a fallback file-lookup path constructed...

nebula-mesh's stores enrollment tokens unhashed in SQLite

internal/store/sqlite.go:1177,1192,1221,1245 — the enrollmenttokens.token column holds the raw UUID token. ConsumeToken does WHERE token = ? against the raw string. Compare with operatorapikeys.keyhash, which is SHA-256 hex constructed in internal/api/middleware.go:51-53. Affected All released...

org.jenkins-ci.plugins:database-drizzle (1.0), org.jenkins-ci.plugins:database-h2 (>=1.0, <=1.1) +3 more potentially affected by CVE-2020-2241 via org.jenkins-ci.plugins:database (>=1.0, <=1.1)

org.jenkins-ci.plugins:database MAVEN version =1.0, =1.0, =1.0, =1.2 - org.jenkins-ci.plugins:database-postgresql 1.0 - org.jenkins-ci.plugins:database-sqlite 1.0 Source cves: CVE-2020-2241 Source advisory: GHSA-9RVW-7MX7-H53X...