lightning-flow-scanner vulnerabilities

1 known vulnerability in lightning-flow-scanner from Flow-Scanner. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  lightning-flow-scanner: Improper Control of Generation of Code

  CVE-2025-67750Dec 12, 2025Flow-Scanner

  Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript execution during scann