CVE-2026-31829

Flowise prior to version 3.0.13 exposes an HTTP Node in AgentFlow and Chatflow that performs server-side HTTP requests to user-controlled URLs with no host restrictions. This enables a Server-Side Request Forgery (SSRF) vulnerability, allowing a user interacting with a publicly exposed chatflow t...

EUVD-2012-4667

Malware in sbrugna...

Path Traversal

web-node-server is vulnerable to Path Traversal. The vulnerability is due to to a lack of sanitization of relative file paths in the start function of nodeserver.js which allows an attacker to write arbitrary files outside the expected directory...

Directory Traversal

web-node-server is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...