CVE-2026-96656 — Plex Media Server External Control of File Name or Path Vulnerability (82/100)
CVE-2025-71338 — flowiseai flowise: Flowise through 2.2.7 fails to sanitize path segments in the document-store loader endpoint, allowing unauthe… (39/100)
CVE-2025-71333 — flowiseai flowise: Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachme… (36/100)