vulnerability in gnutls (CLSA-2026-1778762233). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.6-23.el9_2.tuxcare.4.els3` or later.
vulnerability in flowise (CVE-2026-46443). Confidential information can be exposed externally. Exploitable via ``credentialName``. Mitigation: upgrade to `3.1.2` or later.
code injection in flowise (CVE-2026-46442). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/v1/node-custom-function`. Mitigation: upgrade to `3.1.2` or later.
vulnerability in flowise (CVE-2026-46441). Confidential information can be exposed externally. Exploitable via `PUT /api/v1/assistants/{assistantId}`. Mitigation: upgrade to `3.1.2` or later.
vulnerability in flowise (GHSA-m99r-2hxc-cp3q). Risk of unauthorized operations or information disclosure. Exploitable via `POST /api/v1/prediction/{chatflows_id}`. Mitigation: upgrade to `3.1.2` or later.
vulnerability in bpftool (CLSA-2026-1778756179). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-348.7.1.el8_5.tuxcare.els38` or later.
vulnerability in flowise (CVE-2026-42863). Confidential information can be exposed externally. Exploitable via `PUT /api/v1/chatflows/{chatflowId}`. Mitigation: upgrade to `3.1.2` or later.
vulnerability in flowise (CVE-2026-42862). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /api/v1/tools/{toolId}`. Mitigation: upgrade to `3.1.2` or later.
vulnerability in flowise (CVE-2026-42861). Confidential information can be exposed externally. Exploitable via `PUT /api/v1/variables/{variableId}`. Mitigation: upgrade to `3.1.2` or later.