Known Vulnerabilities for Flow-server by Vaadin
Listed below are 1 of the newest known vulnerabilities associated with "Flow-server" by "Vaadin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56275 json | Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to b... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-55759 json | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6... | Not Provided | 2026-06-24 | 2026-06-26 |
| CVE-2026-55666 json | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6... | Not Provided | 2026-06-24 | 2026-06-29 |
| CVE-2026-55659 json | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embe... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-55611 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. F... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-55205 json | Hermes WebUI before 0.51.468 contains a resource exhaustion vulnerability in the unauthenticated POST /api/onboarding/oauth/s... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-53782 json | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS ... | Not Provided | 2026-06-11 | 2026-06-11 |
| CVE-2026-48726 json | A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout ... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-48249 json | Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_... | Not Provided | 2026-05-21 | 2026-05-26 |
| CVE-2026-48248 json | Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER... | Not Provided | 2026-05-21 | 2026-05-26 |