https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T18:37:52.127446+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-91936 fkie_cve-2026-91936 2026-10-01T18:37:52.160631+00:00

Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run blocks. Attackers with repository write access can inject shell metacharacters through inputs like tag_version and node_version to execute arbitrary commands and steal AWS credentials and Docker Hub tokens.

 https://db.gcve.eu/vuln/ghsa-4qm7-66jj-3q9w GHSA-4qm7-66jj-3q9w 2026-10-01T18:37:52.160779+00:00

Flowise versions before 3.1.4 contain a script injection vulnerability in Docker image build workflows where workflow_dispatch inputs are directly interpolated into shell run blocks. Attackers with repository write access can inject shell metacharacters through inputs like tag_version and node_version to execute arbitrary commands and steal AWS credentials and Docker Hub tokens.