Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: FlintSH Clear all filters
TI-2026-23464 CVE-2026-30231

Flare: Private File IDOR via raw/direct endpoints

Priority LOW 27

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00313 Published 2026-03-06 Fixed in 1.7.2 CWE-639
TI-2026-23463 CVE-2026-30230

Flare: Password‑Protected Thumbnail Bypass

Priority LOW 36

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00415 Published 2026-03-06 Fixed in 1.7.2 CWE-639
TI-2026-21472 CVE-2026-26993

Flare has XSS vulnerability in Raw File Preview

Priority LOW 24

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00324 Published 2026-02-20 No fix listed CWE-79