{"vulnerability": "CVE-2026-100610", "sightings": [{"uuid": "975da239-459b-4e77-a4ab-4e292a72683c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhxnq4mpp2u", "content": "CVE-2026-100610 - flowise\nIn Flowise versions up to 3.1.4, the web endpoints that show or remove upsert\u2011history do not verify who is allowed to use them. Because of this, any logged\u2011in user or holder of a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-27T04:30:06.466084Z"}]}