https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 23:43:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290924 EUVD-2026-290924 https://cve.radiocsirt.org/vuln/euvd-2026-290924 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6125 <p>A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.</p> <p>A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6125 https://cve.radiocsirt.org/vuln/ghsa-822v-8w6h-5jxp <p><strong>Affected:</strong> Maven: org.dromara.warm:warm-flow-plugin-modes-sb</p> <p>A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.</p> <p><strong>Affected:</strong> Maven: org.dromara.warm:warm-flow-plugin-modes-sb</p> <p>A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-822v-8w6h-5jxp