https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T06:26:28.129941+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-73484 fkie_cve-2026-73484 2026-10-17T06:26:28.148779+00:00

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.

 https://db.gcve.eu/vuln/ghsa-354w-hcpx-6wvw GHSA-354w-hcpx-6wvw 2026-10-17T06:26:28.148844+00:00

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesystem.