FlowiseAI Vulnerable to Credential Data Leak
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46443 · GHSA-7g73-99r4-m4mj · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
6451–6475 of 30,985 matching · newest first
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46443 · GHSA-7g73-99r4-m4mj · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46442 · GHSA-9rvc-vf7m-pgm2 · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46441 · GHSA-hp26-q66v-q2w7 · amended
npm flowise +1 · Upgrade all 2 to 3.1.2 or later · <= 3.1.1 · CVE-2026-56274 · GHSA-m99r-2hxc-cp3q · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46440 · GHSA-php6-83fg-gw3g · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42863 · GHSA-5wxp-qjgq-fx6m · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42862 · GHSA-x5v6-pj28-cwwm · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42861 · GHSA-6fw7-3q8r-m5vj · amended
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.80.1 or later · < 4.80.1 · CVE-2026-46356 · GHSA-mxmp-wr3w-rvqx
npm @strapi/strapi · Upgrade to 5.37.0 or later · >= 4.0.0, < 5.37.0 · CVE-2026-27886 · GHSA-rjg2-95x7-8qmx · amended
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.1 or later · < 4.81.1 · CVE-2026-26191 · GHSA-9vcr-g537-3w5v
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.0 or later · < 4.81.0 · CVE-2026-26062 · GHSA-x67p-9m2r-fxqv
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.82.0 or later · < 4.82.0 · CVE-2026-24899 · GHSA-ffg9-j72f-j6xm
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.80.1 or later · < 4.80.1 · CVE-2026-24000 · GHSA-j8h8-75h3-jg53
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.0 or later · < 4.81.0 · CVE-2026-23998 · GHSA-2rc4-7jc6-qffh
npm @strapi/upload · Upgrade to 5.33.3 or later · <= 5.33.2 · CVE-2026-22707 · GHSA-pcw7-5633-82vv · amended
Maven com.amazon.redshift:redshift-jdbc42 · Upgrade to 2.2.2 or later · < 2.2.2 · CVE-2026-8178 · GHSA-wmmv-vvg5-993q
Maven org.apache.commons:commons-configuration2 · Upgrade to 2.15.0 or later · >= 2.2, < 2.15.0 · CVE-2026-45205 · GHSA-337m-mw94-2v6g
Go github.com/grafana/grafana · Upgrade to 1.9.2-0.20260513165311-fb7336fc36c1 (pre-release) or later · < 1.9.2-0.20260513165311-fb7336fc36c1 · CVE-2026-33380 · GHSA-gxcp-jjxh-rwp4
Go github.com/grafana/grafana · Upgrade to 1.9.2-0.20260513165311-fb7336fc36c1 (pre-release) or later · < 1.9.2-0.20260513165311-fb7336fc36c1 · CVE-2026-33381 · GHSA-wfhv-mj62-f5xh
npm @strapi/plugin-users-permissions +1 · Upgrade all 2 to 5.33.3 or later · <= 5.33.2 · CVE-2026-22706 · GHSA-hvp3-26wx-g2w4 · amended
npm @strapi/content-type-builder · Upgrade to 5.33.2 or later · >= 5.0.0, < 5.33.2 · +1 more package · CVE-2026-22599 · GHSA-3xcq-8mjw-h6mx · amended
npm @strapi/plugin-users-permissions · Upgrade to 5.45.0 or later · <= 5.44.0 · CVE-2025-64526 · GHSA-7mqx-wwh4-f9fw · amended
Go github.com/siyuan-note/siyuan/kernel · Upgrade to 0.0.0-20260512140701-d7b77d945e0d (pre-release) or later · < 0.0.0-20260512140701-d7b77d945e0d · CVE-2026-45371 · GHSA-gmmv-4cc5-wr9r
InterfaceAccount allows account substitution between unexpected typescrates.io anchor-lang · Upgrade to 1.0.0-rc.2 (pre-release) or later · >= 1.0.0-rc.1, <= 1.0.0-rc.1 · GHSA-429q-fhh4-r6hj
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.