Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 6 total.
Broken access control in Dokploy docker-container-terminal WebSocket (CVE-2026-72864)
The local branch of the `/docker-container-terminal` WebSocket endpoint in Dokploy authenticates connections using `validateRequest` but performs no authorization check against the caller's role, organization, or serv...
Fixed in v0.29.13
Unauthenticated OAuth2 token refresh endpoint in Flowise (CVE-2026-70478)
The OAuth2 token refresh endpoint (`POST /api/v1/oauth2-credential/refresh/:credentialId`) in Flowise is included in `WHITELIST_URLS`, requiring no authentication. An attacker who obtains a credential ID can call this...
Fixed in 3.1.3
Remote code execution in FlowiseAI Flowise via SQLite Record Manager Node (CVE-2026-69259)
The SQLite Record Manager node in Flowise accepts a user-controlled `additionalConfig` input whose contents are spread into the SQLite options object after the `database` property is set, allowing an authenticated att...
Fixed in flowise 3.1.3; flowise-components 3.1.3
Arbitrary code execution in Postiz pr-docker-build.yml workflow (CVE-2026-42298)
A "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (`.github/workflows/pr-docker-build.yml`) allows any unauthenticated attacker to execute arbitrary code during the Docker build process b...
Fixed in >= 0
OS command injection in Termix Docker container management endpoints (CVE-2026-42454)
All Docker container management endpoints in Termix interpolate the `containerId` URL path parameter and WebSocket message field directly into shell commands executed via `ssh2.Client.exec()` on remote managed servers...
Fixed in 2.1.0
Heap buffer overflow in Wazuh manager rootcheck parsing (CVE-2026-34150)
CVE-2026-34150 is a heap buffer overflow in wazuh-analysisd affecting the Wazuh manager's rootcheck event parsing function W_JSON_ParseRootcheck, where a 30-byte heap buffer is written to without bounds checking via s...
Fixed in >= 4.14.5