https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:08:15.219914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369357 EUVD-2026-369357 2026-10-03T16:08:15.270568+00:00 EUVD-2026-369357 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90580 fkie_cve-2026-90580 2026-10-03T16:08:15.270604+00:00

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.1.3 is able to resolve this issue. The patch is identified as 700137738bcaebefd4709021f6d6b0abcd7df0ac. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/ghsa-34pj-pvgp-fjwr GHSA-34pj-pvgp-fjwr 2026-10-03T16:08:15.270639+00:00

A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the argument Host/X-Forwarded-Proto results in server-side request forgery. The attack may be launched remotely. The exploit has been made public and could be used. Upgrading to version 3.1.3 is able to resolve this issue. The patch is identified as 700137738bcaebefd4709021f6d6b0abcd7df0ac. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3326 WID-SEC-W-2026-3326 — Flowise: Mehrere Schwachstellen 2026-10-03T16:08:15.270659+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen, was weitere Angriffe ermöglicht.