Количество 2
Количество 2
CVE-2025-55346
6 месяцев назад
User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request.
CVSS3: 9.8
EPSS: Низкий
GHSA-hmgh-466j-fx4c
4 месяца назад
Flowise vulnerable to RCE via Dynamic function constructor injection
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-55346 User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад |
| GHSA-hmgh-466j-fx4c Flowise vulnerable to RCE via Dynamic function constructor injection | CVSS3: 9.8 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу
20