133847 matches found
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk-portable: java-21-openjdk-portable-21.0.12.0.8-0.1.hum1 aarch64, x8664 java-21-openjdk-portable-devel-21.0.12.0.8-0.1.hum1 aarch64, x8664...
CVE-2026-69258
Flowise before 3.1.3 is vulnerable: unauthenticated POST /api/v1/prediction/:id accepts an overrideConfig object that is blindly spread into internal flowConfig and flowData without validating apiOverrideStatus. This enables attackers to inject arbitrary properties into the flow execution context...
EUVD-2026-52762
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an overrideConfig object and unconditionally spread it into internal flowConfig and flowData objects in...
ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in pyjwt - Patched by Root
Root has patched CVE-2026-48526 in the pyjwt package for Root:PyPI. Multiple fixed versions available...
CVE-2026-69252
Flowise CVE-2026-69252: Before 3.1.3, the /api/v1/files route was protected only by feat:files and did not enforce checkPermission on GET/DELETE. A low-privileged, authenticated API key could list files under the organization root and delete files in other workspaces within the same organization ...
CLSA-2026-1785727930 TuxCare security update for org.assertj:assertj-core (1 CVE)
TuxCare rebuilt org.assertj:assertj-core to address 1 CVE. Fixed in 3.11.1-tuxcare.1...
CLSA-2026-1785727932 TuxCare security update for org.apache.logging.log4j (3 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 3 CVEs. Fixed in 2.17.2-tuxcare.2...
CLSA-2026-1785381052 TuxCare security update for angular (4 CVEs)
TuxCare rebuilt angular to address 4 CVEs. Fixed in 1.5.10-tuxcare.3...
CLSA-2026-1785291684 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 77 org.springframework.boot packages to address 1 CVE. Fixed in 2.4.6-tuxcare.7...
CLSA-2026-1784943220 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 4.1.0-tuxcare.3...
CLSA-2026-1784943288 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.1.4-tuxcare.2...
CLSA-2026-1785117456 TuxCare security update for form-data (3 CVEs)
TuxCare rebuilt form-data to address 3 CVEs. Fixed in 2.0.0-tuxcare.2...
CLSA-2026-1784856365 TuxCare security update for 12 packages (1 CVE)
TuxCare rebuilt 12 packages to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
CLSA-2026-1784856187 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.2...
CLSA-2026-1784856030 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.0.1-tuxcare.3...
CLSA-2026-1784856448 TuxCare security update for postcss (1 CVE)
TuxCare rebuilt postcss to address 1 CVE. Fixed in 8.4.41-tuxcare.3...
CLSA-2026-1784856205 TuxCare security update for axios (21 CVEs)
TuxCare rebuilt axios to address 21 CVEs. Fixed in 1.7.9-tuxcare.1...
CLSA-2026-1784769530 TuxCare security update for jsonwebtoken (5 CVEs)
TuxCare rebuilt jsonwebtoken to address 5 CVEs. Fixed in 0.1.0-tuxcare.1...