CVE-2025-67750
1 advisory.
npm/lightning-flow-scanner CVE-2025-67750: high 8.4, EPSS 0.19%
Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule
Action: Upgrade lightning-flow-scanner to 6.10.6 or later.
npm i lightning-flow-scanner@6.10.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.10.6 | - |
Fixed versions
| 6.10.6 |
Sources
- osv: GHSA-55jh-84jv-8mx8
- https://github.com/Flow-Scanner/lightning-flow-scanner/security/advisories/GHSA-55jh-84jv-8mx8
- https://nvd.nist.gov/vuln/detail/CVE-2025-67750
- https://github.com/Flow-Scanner/lightning-flow-scanner/commit/10f64a5eb193d8a777e453b25e910144e4540795
- https://github.com/Flow-Scanner/lightning-flow-scanner
- https://github.com/Flow-Scanner/lightning-flow-scanner/releases/tag/core-v6.10.6
CVE-2025-67750 · published · modified · JSON