com.payneteasy.superfly:superfly-web (>=1.1-1, <=1.1-2), org.grails:grails-webflow (>=2.2.0.rc2, <=2.2.4) +9 more potentially affected by CVE-2026-41842 via org.springframework:spring-webmvc (2.5.6.sec01)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.1-1, =2.2.0.rc2, =2.0.2, =1.0.0.release,...

com.yubico:webauthn-server-attestation (2.9.0-alpha1), org.apereo.cas:cas-server-support-webauthn-core (8.0.0-rc4) +1 more potentially affected by CVE-2026-46419 via com.yubico:webauthn-server-core (2.9.0-alpha1)

com.yubico:webauthn-server-core MAVEN version 2.9.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on com.yubico:webauthn-server-core and may be impacted: - com.yubico:webauthn-server-attestation 2.9.0-alpha1 -...

com.yubico:webauthn-server-attestation (>=2.8.0, <=2.8.1), nl.astraeus:kotlin-partials-jvm (>=2.2.0, <=3.0.0) +2 more potentially affected by CVE-2026-46419 via com.yubico:webauthn-server-core (>=2.8.0, <=2.8.1)

com.yubico:webauthn-server-core MAVEN version =2.8.0, =2.8.0, =2.2.0, =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc3 Source cves: CVE-2026-46419 Source advisory: MEND:CVE-2026-46419...

com.payneteasy.superfly:superfly-web (>=1.1-1, <=1.1-2), org.grails:grails-webflow (>=2.2.0.rc2, <=2.2.4) +9 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (2.5.6.sec01)

org.springframework:spring-webmvc MAVEN version 2.5.6.sec01 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.payneteasy.superfly:superfly-web =1.1-1, =2.2.0.rc2, =2.0.2, =1.0.0.release,...

org.jasig.cas:cas-server-support-token (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-token-webflow (>=4.2.0-rc1, <=4.2.1) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.8.2)

org.pac4j:pac4j-jwt MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.jasig.cas:cas-server-support-token =4.2.0-rc1, =4.2.0-rc1, =4.2.1 Source cves: CVE-2026-29000 Source advisory:...

net.bookrain:example-system (0.0.1), net.bookrain:system (0.0.1) +6 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.4.0)

org.pac4j:pac4j-jwt MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - net.bookrain:example-system 0.0.1 - net.bookrain:system 0.0.1 - org.apereo.cas:cas-server-support-token-authentication...

org.jasig.cas:cas-server-support-token (>=4.2.5, <=4.2.7), org.jasig.cas:cas-server-support-token-webflow (>=4.2.5, <=4.2.7) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.8.9)

org.pac4j:pac4j-jwt MAVEN version 1.8.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.jasig.cas:cas-server-support-token =4.2.5, =4.2.5, =4.2.7 Source cves: CVE-2026-29000 Source advisory:...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.github.hiwepy:pac4j-spring-boot-starter (3.3.x.20241020.release) +2 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.5, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.5, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

CVE-2023-49818

Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8...

CVE-2024-34689

WebFlow Services of SAP Business Workflow allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of th...

How Webflow Helps Companies Move Faster Without Sacrificing Brand Control

Conventional development frequently results in a trade-off between speed and brand consistency, which harms reputation by causing delays…...

EUVD-2023-53726

Malicious code in bioql PyPI...

Malicious code in webflow-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42b661acb4e76b31c10ac6138d3b67ef2606a39e5c0c291796f123ac6b232d93 The OpenSSF Package Analysis project identified 'webflow-extension' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6875 Malicious code in webflow-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42b661acb4e76b31c10ac6138d3b67ef2606a39e5c0c291796f123ac6b232d93 The OpenSSF Package Analysis project identified 'webflow-extension' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Fake DocuSign email hides tricky phishing attempt

On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine DocuSign notification turned into a multi-layered deception involving Webflow, a shady redirect, and a legitimate Google login page. Webflow is a...

Hackers Use CAPTCHA Trick on Webflow CDN PDFs to Bypass Security Scanners

A widespread phishing campaign has been observed leveraging bogus PDF documents hosted on the Webflow content delivery network CDN with an aim to steal credit card information and commit financial fraud. "The attacker targets victims searching for documents on search engines, resulting in access ...

CVE-2023-49818

Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8...

CVE-2023-49818 WordPress Webflow Pages plugin <= 1.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8...

WordPress plugin Webflow Pages has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-49818: Missing Authorization

Missing Authorization vulnerability in Webflow Webflow Pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webflow Pages: from n/a through 1.0.8...