Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-69252

  CVE-2026-69252: Flowise Missing Authorization on File Management API

  Any API key in a Flowise organization, even one with unrelated permissions, can list and delete files belonging to other workspaces because the file management routes skip permission checks entirely.

• highCVE-2026-69250

  CVE-2026-69250: Flowise Unauthenticated OAuth2 Refresh SSRF and Secret Exfiltration

  Anyone on the internet can trigger Flowise's OAuth2 token-refresh endpoint without logging in, causing the server to POST credential secrets to an attacker-controlled URL and echo the full response…

• high

  CVE-2026-67354: guzzlehttp/guzzle URI Fragment Disclosure via Referer Header

  When Guzzle follows a redirect with the referer option enabled, it copies the full URL including any '#fragment' into the Referer header, letting the redirect destination server read secrets that…

• high

  CVE-2026-67355: guzzlehttp/guzzle Host-Only Cookie Scope Bypass

  Guzzle's cookie jar silently promotes host-only cookies into domain cookies, so any subdomain an attacker controls can receive session tokens that were meant exclusively for the origin host.

• highCVE-2026-69246

  CVE-2026-69246: Guzzle Noncanonical Host SSRF Bypass

  Guzzle passes a URI to libcurl or fopen exactly as written, so a percent-encoded or otherwise noncanonical host string can fool application-level IP checks while still reaching a blocked address on…

• highCVE-2026-69247

  CVE-2026-69247: cryptography PKCS#7 EnvelopedData Bleichenbacher Oracle

  The Python cryptography library's PKCS#7 decryption functions leaked distinguishable error messages and timing differences that let an attacker use any service decrypting S/MIME or CMS messages as an…

• highCVE-2026-69249

  CVE-2026-69249: cryptography Exponential Certificate Chain DoS

  Passing duplicate self-signed certificates to the cryptography library's chain verifier triggers exponential recursion, letting anyone who can supply a certificate chain stall or crash a Python…

• highCVE-2026-69244

  CVE-2026-69244: aiohttp Out-of-Bounds Heap Read in C HTTP Response Parser

  A malformed chunked HTTP response from an attacker-controlled server can crash the aiohttp client by triggering an out-of-bounds heap read inside the compiled C parser, causing a denial of service.

• criticalCVE-2026-69240

  CVE-2026-69240: Sequelize SQL Injection via Oracle TO_DATE/TO_TIMESTAMP Bypass

  Sequelize's Oracle dialect skips quote-escaping for strings that start with TO_DATE or TO_TIMESTAMP, letting an attacker inject arbitrary SQL through any user-controlled query parameter.

• highCVE-2026-69192

  CVE-2026-69192: ip-address Address4 Leading-Zero Octet SSRF Bypass

  The ip-address library accepts IPv4 octets with a leading zero and reads them as decimal, while every real resolver reads them as octal, so an SSRF filter built on Address4 can be tricked into…

• highCVE-2026-18446

  CVE-2026-18446: fast-uri Host Confusion via Backslash Authority Introducer

  A URL passed to fast-uri for allowlist or SSRF validation can use backslash characters in place of the normal // authority prefix, causing fast-uri and Node's native fetch/URL to disagree on the…

• highCVE-2026-69152

  CVE-2026-69152: brace-expansion DoS via unbounded intermediate arrays

  A crafted ~25 KB input can crash a Node.js process with an uncatchable out-of-memory error, or a ~400 KB input can stall the event loop for over two minutes, because the maxLength guard added in…