Known Vulnerabilities for Flow-server by Flow
Listed below are 10 of the newest known vulnerabilities associated with "Flow-server" by "Flow".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123801 json | SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3... | Not Provided | 2026-11-09 | 2026-11-10 |
| CVE-2026-123271 json | ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied P... | Not Provided | 2026-11-05 | 2026-11-09 |
| CVE-2026-121925 json | A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-114612 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.1... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-112381 json | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while ... | Not Provided | 2026-10-21 | 2026-10-23 |
| CVE-2026-112208 json | A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-sou... | Not Provided | 2026-11-05 | 2026-11-09 |
| CVE-2026-111874 json | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of ... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-110803 json | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the bl... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-110737 json | The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Ori... | Not Provided | 2026-10-27 | 2026-11-04 |
| CVE-2026-110185 json | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is ... | Not Provided | 2026-10-28 | 2026-10-28 |