Advisories · Technology

Floci.

Every CVE that names Floci among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-124509 CVE record

CVSS 6.9 Medium

floci-io Floci S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName path traversal
- Floci
- Path traversal
Not analysed yet 9 Nov 2026
CVE-2026-124508 CVE record

CVSS 6.9 Medium

floci-io Floci Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts path traversal
- Floci
- Path traversal
Not analysed yet 9 Nov 2026
CVE-2026-108598 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates
- floci
- Code injection
Not analysed yet 10 Oct 2026