Skip to content
OpenAdvisories

Vendor

FlintSH

4 known vulnerabilities.

Products

Flare 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-30942

    Flare has a Path Traversal in /api/avatars/[filename]

    Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to 1.7.3, an authenticated path traversal vulnerability in /api/avatars/[filename] allows any logged-in user to read arbitrary files from within the app…

    FlintSH Flare
  • High 8.2
    CVE-2026-30230

    Flare: Password‑Protected Thumbnail Bypass

    Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but sk…

    FlintSH Flare