Skip to content
OpenAdvisories

Product · dromara

warm-flow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-6125

    Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection

    A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipConditio…

    dromara warm-flow org.dromara.warm:warm-flow-plugin-modes-sb Maven