Flowable - vulnerabilities (CVEs)

1 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-14.

Products

• Flowable-engine - 1 CVEs

Newest CVEs of Flowable

• CVE-2026-91197 - CVSS 7.1 (high), 2026-09-14: Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable…