Threats tagged 'ghsa-354w-hcpx-6wvw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.4%	CVE-2026-73484FlowiseAI Flowise · Incomplete List of Disallowed Inputs High8.6EPSS 0.4%2026-08-13CVE Database V5CVE-2026-73484 Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem. EPSS 0.4%Vulnerability #ghsa-354w-hcpx-6wvw	CVE Database V5	2026-08-13

Page 1 of 1