Threats tagged 'ghsa-wp74-f5hh-5f3r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.5%	CVE-2026-69252FlowiseAI Flowise · Missing Authorization High7.2EPSS 0.5%2026-08-04CVE Database V5CVE-2026-69252 FlowiseAI Flowise versions prior to 3.1.3 contain a missing authorization vulnerability in the /api/v1/files API endpoint. Low-privileged authenticated API keys with unrelated permissions could list and delete files across different workspaces within the same organization due to insufficient permission checks. This issue is resolved in version 3.1.3. EPSS 0.5%Vulnerability CWE-862 #ghsa-wp74-f5hh-5f3r #npm	CVE Database V5	2026-08-04

Page 1 of 1