8 matches found
VulnCheck KEV: CVE-2026-56271
Flowise before 3.1.0 affected versions 3.0.13 and earlier uses weak hardcoded default JWT secrets 'authtoken', 'refreshtoken' and default audience and issuer values 'AUDIENCE', 'ISSUER' in the enterprise passport authentication middleware packages/server/src/enterprise/middleware/passport/index.t...
9.8CVSS5.8AI score0.00655EPSS
SaveIn wildExploits0References2
20