CVE-2026-58057

Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment names are case-insensitive, supplying 'nodeoptions' bypasses the NODEOPTIONS denylist entry. An authenticated user who can configure a Custo...

WS-2019-0161

bootstrap-vue before 2.0.0-rc.12 do not sanitize input sufficiently, components may be vulnerable to Cross-Site Scripting through the options variable...

EUVD-2022-40230

Malicious code in bioql PyPI...

PT-2020-21231

Name of the Vulnerable Software and Affected Versions bootstrap-vue versions prior to 2.0.0-rc.12 Description The issue is related to insufficient input sanitization, making components vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious...