Lightning Flow Scanner is Vulnerable to Code Injection via Unsafe Use of new Function() in APIVersion Rule

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-67750 · Microsoft / collected KEV context

EUVD-2025-203110

GHSA-55jh-84jv-8mx8

cve-program · CVE-2025-67750

• https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8
• https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795
• https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6

euvd · EUVD-2025-203110

• https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8
• https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795
• https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6

nvd · CVE-2025-67750

• https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795
• https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6
• https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8

osv · GHSA-55jh-84jv-8mx8

• https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8
• https://nvd.nist.gov/vuln/detail/CVE-2025-67750
• https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795
• https://github.com/Flow-Scanner/lightning-flow-scanner
• https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6

No related operational record is retained in the current change model.