Aggregator

CVE-2026-12821 | FlowiseAI Flowise up to 3.1.2 S3 Document Loader S3.ts path traversal

VulDB Recent Entries
6 days 16 hours ago
A vulnerability classified as critical was found in FlowiseAI Flowise up to 3.1.2. The impacted element is an unknown function of the file packages/components/nodes/documentloaders/S3/S3.ts of the component S3 Document Loader. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-12821. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

INC

Dark Feed IO
6 days 17 hours ago

You must login to view this content

cohenido

CVE-2026-12291

CVE Trends
6 days 18 hours ago
Currently trending CVE - Hype Score: 5 - Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

CVE-2026-42055

CVE Trends
6 days 18 hours ago
Currently trending CVE - Hype Score: 5 - NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_invalid_headers directive is ...

CVE-2026-42530

CVE Trends
6 days 18 hours ago
Currently trending CVE - Hype Score: 7 - NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK ...

CVE-2026-35273

CVE Trends
6 days 18 hours ago
Currently trending CVE - Hype Score: 6 - Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2025-49706

CVE Trends
6 days 18 hours ago
Currently trending CVE - Hype Score: 8 - Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Managed ad