📄 Flowise 3.0.4 Code Injection

Flowise versions 3.0.4 and below suffer from a remote command injection vulnerability. ============================================================================================================================================= | Title : Flowise 3.0.4 php code injection | | Author : indoushka | ...

GHSA-3G4J-R53P-22WX Duplicate Advisory: FlowiseAI Pre-Auth Arbitrary Code Execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7944-7c6r-55vv. This link is maintained to preserve external references. Original Description Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supaba...

Duplicate Advisory: FlowiseAI Pre-Auth Arbitrary Code Execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7944-7c6r-55vv. This link is maintained to preserve external references. Original Description Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supaba...

CVE-2025-57164

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field...

EUVD-2025-34899

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field...

CVE-2025-57164

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field...

EUVD-2020-15958

Malware in sbrugna...

EUVD-2021-1462

Malware in sbrugna...

EUVD-2020-10379

Malware in sbrugna...

EUVD-2021-15470

Malware in sbrugna...

EUVD-2020-16439

Malware in sbrugna...

EUVD-2022-34876

Malicious code in bioql PyPI...

EUVD-2023-33376

Malicious code in bioql PyPI...

EUVD-2025-31224

Malicious code in bioql PyPI...

EUVD-2025-28049

Malicious code in bioql PyPI...

EUVD-2024-17109

Malicious code in bioql PyPI...

EUVD-2025-30727

Malicious code in bioql PyPI...

EUVD-2025-4287

Malicious code in bioql PyPI...

CVE-2025-57984

Server-Side Request Forgery SSRF vulnerability in Pratik Ghela MakeStories for Google Web Stories makestories-helper allows Server Side Request Forgery.This issue affects MakeStories for Google Web Stories: from n/a through = 3.0.4...

PT-2025-38769

Name of the Vulnerable Software and Affected Versions ERA404 LinkedInclude versions through 3.0.4 Description A Cross-Site Request Forgery CSRF issue exists in ERA404 LinkedInclude, which can lead to Stored Cross-Site Scripting XSS. The issue allows for potential malicious actions to be performed...