Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the node-custom-function endpoint when user-supplied JavaScript is executed in a NodeVM sandbox without sufficient route-level authorization. A user can execute...

exploit-development

exploit-dev...

CVE-2026-46480

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:32+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wxrr-jp8m-qq7f 2026-06-08 17:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns634lsdt2a...

CVE-2026-46479

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:18+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-mq53-pc65-wjc4 2026-06-08 17:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns6n7iq7p2r...

CVE-2026-46477

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:06+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5h9v-837x-m97r 2026-06-08 17:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns75tvowx2z...

CVE-2026-46478

creationtimestamp| type| source ---|---|--- 2026-05-14 14:17:49+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7j65-65cr-6644 2026-06-08 16:59:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns5rqk6nl2o...

CVE-2026-46476

creationtimestamp| type| source ---|---|--- 2026-05-14 14:17:36+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-728h-4mwj-f2p4 2026-06-08 17:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns6gihbi32r...

CVE-2026-46442

creationtimestamp| type| source ---|---|--- 2026-05-14 14:13:39+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2 2026-06-08 16:47:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns54nhn6s2o 2026-06-22 00:39:12+00:00|...

CVE-2026-42861

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:50+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6fw7-3q8r-m5vj...

CVE-2026-46441

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:38+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hp26-q66v-q2w7 2026-06-08 16:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns5g6b3io2a 2026-06-22 00:32:26+00:00|...

CVE-2026-42862

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:20+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x5v6-pj28-cwwm...

CVE-2026-42863

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:08+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5wxp-qjgq-fx6m...

CVE-2026-43977

creationtimestamp| type| source ---|---|--- 2026-05-14 12:37:19+00:00| published-proof-of-concept| https://github.com/wger-project/wger/security/advisories/GHSA-cj9g-27ph-4cgv 2026-07-16 23:44:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsg5fikth2n...

CVE-2026-43978

creationtimestamp| type| source ---|---|--- 2026-05-14 12:36:41+00:00| published-proof-of-concept| https://github.com/wger-project/wger/security/advisories/GHSA-9qpr-vc49-hqg2 2026-07-16 23:43:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsg2fmcbx2s...

CVE-2026-44011

creationtimestamp| type| source ---|---|--- 2026-05-14 12:17:47+00:00| seen| https://www.acn.gov.it/portale/w/craft-cms-disponibili-poc-per-lo-sfruttamento-delle-cve-2026-44010-e-cve-2026-44011 2026-09-27 07:00:07+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/103500 2026-09-27...

CVE-2026-45799

creationtimestamp| type| source ---|---|--- 2026-05-14 11:34:06+00:00| published-proof-of-concept| https://github.com/square/wire/security/advisories/GHSA-7xpr-hc2w-34m9 2026-07-18 16:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwn5e65f52f...

CVE-2026-46431

creationtimestamp| type| source ---|---|--- 2026-05-14 09:15:35+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-hw27-4v2q-5qff...

CVE-2026-46430

creationtimestamp| type| source ---|---|--- 2026-05-14 09:10:41+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-gj84-924c-48fx...

CVE-2026-46426

creationtimestamp| type| source ---|---|--- 2026-05-14 08:35:54+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-82rc-gxrg-v4gf 2026-05-27 19:19:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7ynnjzd2q...

CVE-2026-46424

creationtimestamp| type| source ---|---|--- 2026-05-14 08:33:39+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-6vp2-6r7m-2jvx 2026-05-27 19:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuamzumeb2o...