PT-2026-68792

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description An authentication bypass exists due to prefix-based whitelist matching in the authentication middleware located in packages/server/src/utils/constants.ts. Unauthenticated attackers can send a POST...

Malware Attack on CircleCI Engineer's Laptop Leads to Recent Security Incident

DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee's laptop and leveraged malware to steal their two-factor authentication-backed credentials to breach the company's systems and data last month. The CI/CD service CircleCI said the "sophisticated...