https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:47:08.269051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-371597 EUVD-2026-371597 2026-10-02T10:47:08.271754+00:00 EUVD-2026-371597 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91938 fkie_cve-2026-91938 2026-10-02T10:47:08.271784+00:00

Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers can provide arbitrary URLs to fetch cloud metadata, internal services, and private network resources with response content returned as document text.

 https://cve.radiocsirt.org/vuln/ghsa-j6jh-78h2-2667 GHSA-j6jh-78h2-2667 2026-10-02T10:47:08.271814+00:00

Flowise versions before 3.1.4 contain a server-side request forgery vulnerability in Cheerio, Playwright, and Puppeteer document loader nodes that bypass SSRF protection. Attackers can provide arbitrary URLs to fetch cloud metadata, internal services, and private network resources with response content returned as document text.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3102 WID-SEC-W-2026-3102 — Flowise: Mehrere Schwachstellen 2026-10-02T10:47:08.271831+00:00

Ein Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um erweiterte Berechtigungen – einschließlich Administratorzugriff – zu erlangen, um beliebigen Code auszuführen, SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.