{"id":"EUVD-2025-10669","revision":"ddef95fb657b49dfb2196bcfef702beb","records":[{"revision":"ddef95fb657b49dfb2196bcfef702beb","observedAt":"2026-11-09T02:17:19.432+00:00","statement":{"source":"euvd","id":"EUVD-2025-10669","aliases":["CVE-2025-29189","GHSA-gjx9-wg9x-7gvp"],"title":"Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","description":"Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","score":7.6,"severity":null}],"references":["https://drive.google.com/file/d/1WHPslTmQmAM9xPJifULS2qAo7hcidB4L/view?usp=sharing"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10669","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 9, 2025, 12:00:00 AM","dateUpdated":"Apr 9, 2025, 2:42:51 PM"},"relatedAdvisories":[{"id":"WID-SEC-W-2025-0785","title":"Flowise: Schwachstelle ermöglicht Manipulation von Dateien","vulnerabilityIds":["CVE-2025-29189"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-10669","identifiers":["EUVD-2025-10669","CVE-2025-29189","GHSA-gjx9-wg9x-7gvp"]},"retained":false,"historicalAffected":[]}],"coverage":[]}