loonflow vulnerabilities

CVEs whose affected-version data names the loonflow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121937Low· 3.1PoC

4d ago

loonflow before r3.2.3 IDOR via ticket_flow_history Endpoint

loonflow before r3.2.3 contains a missing authorization vulnerability in TicketFlowHistoryView that allows any authenticated user to read other users' ticket flow history by supplying a ticket UUID. Attackers can request the ticket_flow_…

▾ Twilightblackholll · loonflowEPSS 0.32%via CVEORG