Skip to content
OpenAdvisories

Product · FlintSH

Flare

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-30231

    Flare: Private File IDOR via raw/direct endpoints

    Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the raw and direct file routes only block unauthenticated users from accessing private files. Any authenticated, non‑owner user who kn…

    FlintSH Flare
  • Medium 4.6
    CVE-2026-26993

    Flare has XSS vulnerability in Raw File Preview

    Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG (or ot…

    FlintSH Flare