Threats tagged 'ghsa-g32j-mmxr-gfq5'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	EPSS 2.7%	CVE-2026-69251FlowiseAI Flowise · Code Injection Critical9.0EPSS 2.7%2026-08-04CVE Database V5CVE-2026-69251 Flowise versions prior to 3.1.3 contain a code injection vulnerability in record manager and agent memory nodes. Authenticated users can set arbitrary TypeORM DataSource options via the additionalConfig input, enabling them to load local JavaScript files and execute arbitrary code on the server. This vulnerability is fixed in version 3.1.3. EPSS 2.7%Vulnerability CWE-94 #ghsa-g32j-mmxr-gfq5 #npm	CVE Database V5	2026-08-04

Page 1 of 1