{"id":"EUVD-2025-203110","enisaUuid":"3668d3c9-565a-3dd1-936f-de17095dcaa1","description":"Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6.","datePublished":"Dec 12, 2025, 8:14:21 PM","dateUpdated":"Dec 12, 2025, 8:50:57 PM","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6\n","aliases":"CVE-2025-67750\nGHSA-55jh-84jv-8mx8\n","assigner":"GitHub_M","epss":0.19,"enisaIdProduct":[{"id":"66ae826c-8c1d-37d1-8cdc-9e5b5a43a8a4","product":{"name":"lightning-flow-scanner","vendor":{"name":"Flow-Scanner"}},"product_version":"\u003c 6.10.6"}],"enisaIdVendor":[{"id":"0b719e6a-8119-3c32-abdf-01403ac1c0b5","vendor":{"name":"Flow-Scanner"}}],"enisaIdVulnerability":[{"id":"236ec39e-0d26-38b3-b934-a3288abd5c6f","vulnerability":{"id":"GHSA-55jh-84jv-8mx8","description":"Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule","datePublished":"Dec 12, 2025, 8:20:34 PM","dateUpdated":"Dec 20, 2025, 5:00:37 AM","baseScore":0.0,"references":"https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-67750\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795\nhttps://github.com/Flow-Scanner/lightning-flow-scanner\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6\n","enisa_id":"EUVD-2025-203110\n","aliases":"CVE-2025-67750\nGHSA-55jh-84jv-8mx8\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"4fa7a89d-e1c6-3f4e-8a90-a8b39ec9b120","vulnerability":{"id":"CVE-2025-67750","description":"Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scanning. The APIVersion rule uses new Function() to evaluate expression strings, enabling an attacker to supply a malicious expression within rule configuration or crafted flow metadata. This could compromise developer machines, CI runners, or editor environments. This issue is fixed in version 6.10.6.","datePublished":"Dec 12, 2025, 8:14:21 PM","dateUpdated":"Dec 12, 2025, 8:50:57 PM","status":"PUBLISHED","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795\nhttps://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6\n","enisa_id":"EUVD-2025-203110\n","assigner":"GitHub_M","epss":0.19,"dataProcessed":"Nov 6, 2026, 7:21:35 AM","vulnerabilityProduct":[{"id":"59232814-63de-39f6-b621-9dcefa25185f","product":{"name":"lightning-flow-scanner","vendor":{"name":"Flow-Scanner"}},"product_version":"\u003c 6.10.6"}],"vulnerabilityVendor":[{"id":"eafc2b36-cdfc-3f84-818c-872cb9dc2ade","vendor":{"name":"Flow-Scanner"}}]}}],"enisaIdAdvisory":[]}