Skip to content
OpenAdvisories

Vendor

Flow-Scanner

1 known vulnerabilities.

Products

lightning-flow-scanner 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2025-67750

    Lightning Flow Scanner is Vulnerable to Code Injection via Unsafe Use of new Function() in APIVersion Rule

    Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scan…

    Flow-Scanner lightning-flow-scanner lightning-flow-scanner npm