Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:36:16 +0000 CVE-2026-73484 — Flowise before 3.1.3 Sandbox Escape via Pandas Methods https://cve.radiocsirt.org/vuln/cve-2026-73484 <p><strong>Affected:</strong> FlowiseAI Flowise</p> <p>Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.</p> <p><strong>Affected:</strong> FlowiseAI Flowise</p> <p>Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.</p> https://cve.radiocsirt.org/vuln/cve-2026-73484