[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-73602":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-13T16:36:48.113Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":54,"aliases":55,"duplicate_of":9,"upstream":56,"downstream":57,"duplicates":58,"related":59,"reserved_at":9,"published_at":60,"modified_at":60,"state":61,"summary":62,"references_raw":69,"kevs":86,"epss":9,"epss_history":87,"metrics":88,"affected":95},"CVE-2026-73602","Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass. Attackers can craft a fake String object with a match function that bypasses path traversal checks to load and execute malicious JavaScript files stored in the document store outside the sandbox.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-95","Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. \"eval\").","weakness","Incomplete","Variant","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[24,35,42],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1027.006","HTML Smuggling",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[],{"id":36,"name":37,"tactics":38,"countermeasures":41},"T1027.009","Embedded Payloads",[39,40],{"id":29,"name":30},{"id":32,"name":33},[],{"id":43,"name":44,"tactics":45,"countermeasures":48},"T1564.009","Resource Forking",[46,47],{"id":29,"name":30},{"id":32,"name":33},[49],{"id":50,"name":51,"tactic":52},"D3-FFV","File Format Verification",{"name":53},"Isolate",[],[],[],[],[],[],"2026-08-13T11:28:08.765Z","Received",{"cisa_kev":63,"cisa_ransomware":63,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":64,"severity_score":65,"severity_version":66,"severity_source":67,"severity_vector":68,"severity_status":61},false,"critical",9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",[70,76,81],{"url":71,"sources":72,"tags":74},"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rqh4-rxw3-93rp",[67,73],"nvd",[75],"Vendor Advisory",{"url":77,"sources":78,"tags":79},"https://github.com/FlowiseAI/Flowise/commit/4211bfc8f15746be4019bba557e29a7ba83d54c5",[67,73],[80],"Patch",{"url":82,"sources":83,"tags":84},"https://www.vulncheck.com/advisories/flowise-before-sandbox-escape-to-rce",[67,73],[85],"Third Party Advisory",[],[],[89,92],{"source":67,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":90},{"baseScore":65,"baseSeverity":91,"vectorString":68,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":93},{"baseScore":65,"baseSeverity":91,"vectorString":94,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[96],{"ecosystem":9,"name":97,"vendor":98,"product":97,"cpe_part":99,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":100},"flowise","flowiseai","a",[101],{"version":102,"is_range":103,"range_type":67,"version_start":9,"version_start_type":9,"version_end":104,"version_end_type":105,"fixed_in":9},"lt3.1.3",true,"3.1.3","excluding"]