Floci-Io

3 CVEs in 1 Floci-Io product, including Floci. Newest: CVE-2026-124509 (2026-11-09). Severity, EPSS and public exploits for each.

Floci-Io products with known CVEs

ProductCVEs
Floci3
Floci-Io CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-124509High7.32026-11-09A vulnerability was identified in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model…
CVE-2026-124508Medium5.32026-11-09A vulnerability was determined in floci-io Floci up to 2.4.0. Impacted is the function BuildspecParser.parseArtifacts of the file src/main/java/io/github/hecto…
CVE-2026-108598Critical9.82026-10-10Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricte…