picklescan versions before 1.0.1 contain a vulnerability in unsafe pickle deserialization. This flaw allows unauthenticated attackers to craft malicious pickle payloads that instantiate the logging.FileHandler class, enabling creation of arbitrary zero-byte files. Exploitation can bypass remote code execution blocklists and may lead to denial of service or disruption by creating lock files or other filesystem artifacts. The issue is fixed in version 1.0.1.
CVE-2026-56295 is an authorization bypass vulnerability in Capgo versions before 12.128.2. It affects webhook management endpoints by allowing legacy non-expiring API keys to bypass an organizational policy that requires API key expiration. This occurs because the function responsible for checking webhook permissions does not properly enforce the expiration policy, enabling unauthorized listing, creation, and deletion of webhooks.
CVE-2026-56294 is an authentication bypass vulnerability in capacitor-native-biometric versions before 12.128.2. The issue arises because the onAuthenticationSucceeded() method does not properly validate CryptoObject parameters, allowing attackers to bypass biometric authentication by hooking this function with dynamic instrumentation.
CVE-2026-56282 is an information disclosure vulnerability in Capgo versions before 12.128.2. It affects the unauthenticated /replication endpoint, which exposes internal PostgreSQL replication telemetry data such as slot names and WAL LSN positions. This allows unauthorized actors to gather sensitive infrastructure details useful for reconnaissance.
Flowise versions before 3.1.2 have a mass assignment vulnerability in the PUT /api/v1/user endpoint. Authenticated users can modify the credential field without proper validation, allowing attackers to bypass password change verification and session invalidation. This enables persistent account access even after temporary session compromise. The issue is fixed in version 3.1.2.
Flowise versions prior to 3.0.13 have an information exposure vulnerability in the password reset API endpoint. This flaw allows unauthenticated attackers to retrieve full user objects, including personally identifiable information (PII), by submitting requests with known email addresses. Sensitive data exposed includes user IDs, names, account status, and timestamps. The vulnerability enables attackers to enumerate valid email addresses and harvest user data without authentication.
CVE-2026-56228 is an improper input validation vulnerability in Capgo versions before 12.128.2. It allows an authenticated organization administrator to set an excessively large minimum password length in the password policy, effectively locking out all users from changing passwords or accessing the organization. This results in an organization-wide account lockout and denial of service at the application level.
CVE-2026-56227 is a server-side request forgery (SSRF) vulnerability in Capgo versions before 12.128.2. The flaw exists in webhook URL validation, allowing organization admins to configure webhooks that point to loopback or internal addresses such as localhost or 127.0.0.1. When these webhooks are triggered, the backend performs outbound requests to these internal addresses and discloses error responses to users.
Capgo versions before 12.128.2 do not remove EXIF metadata from uploaded images, including GPS geolocation data. This flaw allows unauthorized actors who can download these images to extract precise latitude and longitude coordinates, revealing the physical location where the image was captured.
Flowise versions prior to 3.0.8 contain a cross-site scripting (XSS) vulnerability due to insufficient input filtering in chat messages and custom agent functions. This flaw allows attackers to inject malicious JavaScript, such as iframe payloads, which execute in the victim's browser and can lead to theft of cookies and session data. The vulnerability is fixed in version 3.0.8.
CVE-2026-56325 is a low-severity vulnerability in Capgo versions before 12.128.2 where improper input validation allows underscore characters in app_id to act as SQL wildcards during app_id lookup. This can cause unintended pattern matches that break preview functionality or cause app-id confusion.
CVE-2026-56317 is a cross-site scripting (XSS) vulnerability in Nuxt versions before 4.4.7 and 3.x versions before 3.21.7. The issue exists in the NoScript component, which writes slot content to innerHTML without proper escaping. This allows attackers to inject malicious scripts via untrusted data, such as route.query parameters, which execute in the document context when the noscript tag is implicitly closed by script tags.
CVE-2026-56216 is a privilege escalation vulnerability in Capgo versions before 12.128.2. It affects the POST /functions/v1/apikey endpoint, allowing attackers with a compromised app-limited API key to create unrestricted keys by setting empty limits. This results in unauthorized org-wide access to sensitive resources such as app listings and protected endpoints.
CVE-2026-56215 is a high-severity authorization bypass vulnerability in Capgo versions before 12.128.12. Authenticated users can modify their public email address to arbitrary values, which the SSO provisioning endpoint trusts as a key for account merging. This allows attackers to pre-position their account with a victim's corporate SSO email, causing the victim's SSO identity to be merged into the attacker-controlled account.
CVE-2026-56214 is an information disclosure vulnerability in Capgo versions before 12.128.2. It affects the Supabase PostgREST RPC endpoints is_trial_org and is_paying_org, allowing unauthenticated attackers to enumerate organizations and disclose their billing status using the public sb_publishable key. This enables attackers to determine organization existence and identify paying customers for profiling purposes.
Capgo versions prior to 12.128.2 have an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER function accessible via PostgREST RPC. This flaw allows unauthenticated attackers to insert arbitrary rows into the version_meta table for any app_id, potentially poisoning storage metrics and causing persistent false data in dashboards and incorrect alerts across affected applications.
CVE-2026-56079 is a vulnerability in Capgo versions before 12.128.2 that allows cross-tenant authorization bypass in PostgREST endpoints. This flaw enables org-scoped read API keys to access webhook secrets and delivery logs of other tenants. Attackers can exfiltrate HMAC signing secrets and delivery payloads, potentially allowing them to forge webhook events against victim organizations.
PraisonAI versions prior to 1.5.115 contain a path traversal vulnerability in the MultiAgentMonitor component. This flaw allows attackers to manipulate agent IDs with traversal sequences (e.g., ../) to access or modify arbitrary files. The vulnerability can lead to sensitive information disclosure, denial of service, or remote code execution. A fix is available in version 1.5.115.
PraisonAI versions prior to 1.5.115 have an information disclosure vulnerability in the MultiAgentLedger component. This flaw allows attackers to register agents with duplicate IDs, bypassing uniqueness enforcement. As a result, attackers can share ledger instances and access sensitive data such as system prompts and conversation history between agents. The vulnerability is rated high severity with a CVSS 4.0 score of 7.1. A fix is available in version 1.5.115.
PraisonAI versions before 1.5.128 have a cross-origin agent execution vulnerability in the AGUI endpoint. The POST /agui endpoint lacks authentication and uses permissive CORS headers (Access-Control-Allow-Origin: *), combined with Starlette's content-type agnostic JSON parsing. This allows remote attackers to bypass CORS preflight checks with simple requests and execute arbitrary agents, potentially exfiltrating sensitive data such as tool execution results and environment information. The vulnerability is fixed in version 1.5.128.