flowise
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 113 advisory(ies) without a verdict
Advisories (114)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-2364-jh4q-m9vm Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint | < 3.1.3 | Undetermined |
| GHSA-28g4-38q8-3cwc Flowise: Cypher Injection in GraphCypherQAChain | < 3.1.0 | Undetermined |
| GHSA-2jch-qc96-9f5g Flowise Cross-site Scripting in api/v1/chatflows/id | ≤ 1.4.3 | Undetermined |
| GHSA-2q4w-x8h2-2fvh Flowise Authentication Bypass vulnerability | ≤ 1.8.2 | Undetermined |
| GHSA-2qqc-p94c-hxwh Flowise: Weak Default Express Session Secret | < 3.1.0 | Undetermined |
| GHSA-2vv2-3x8x-4gv7 Flowise OS command remote code execution | ≤ 3.0.5 | Undetermined |
| GHSA-2x8m-83vc-6wv4 Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) | < 3.1.0 | Undetermined |
| GHSA-35g6-rrw3-v6xc FlowiseAI/Flosise has File Upload vulnerability | 3.0.7 – < 3.0.8 | Undetermined |
| GHSA-3769-jgqc-cxm7 Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override | < 3.1.3 | Undetermined |
| GHSA-3gcm-f6qx-ff7p Flowise has Remote Code Execution vulnerability | 3.0.5 – < 3.0.6 | Undetermined |
| GHSA-3hjv-c53m-58jj Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | < 3.1.0 | Undetermined |
| GHSA-3prp-9gf7-4rxx Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) | < 3.1.0 | Undetermined |
| GHSA-48m6-ch88-55mj Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association | < 3.1.0 | Undetermined |
| GHSA-48x4-mx8f-gr4h Flowise Unauthenticated Denial of Service (DoS) vulnerability | ≤ 1.8.2 | Undetermined |
| GHSA-4fr9-3x69-36wv Flowise vulnerable to XSS | < 3.0.8 | Undetermined |
| GHSA-4j8x-x6v7-w9rq Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation | < 3.1.3 | Undetermined |
| GHSA-4jpm-cgx2-8h37 Flowise: Sensitive Data Leak in public-chatbotConfig | < 3.1.0 | Undetermined |
| GHSA-52fh-8v99-63c2 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE | < 3.1.3 | Undetermined |
| GHSA-59fh-9f3p-7m39 Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification | < 3.1.2 | Undetermined |
| GHSA-5cph-wvm9-45gj Flowise OverrideConfig security vulnerability | < 2.1.4 | Undetermined |
| GHSA-5f53-522j-j454 Flowise Missing Authentication on NVIDIA NIM Endpoints | < 3.0.13 | Undetermined |
| GHSA-5fw2-mwhh-9947 Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials | < 3.1.0 | Undetermined |
| GHSA-5h9v-837x-m97r FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover | < 3.1.2 | Undetermined |
| GHSA-5wxp-qjgq-fx6m FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow Reassignment | < 3.1.2 | Undetermined |
| GHSA-5xvg-pmgg-3mxr Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability | < 3.1.3 | Undetermined |
| GHSA-66f2-xxgm-f6xp Flowise Cors Misconfiguration in packages/server/src/index.ts | ≤ 1.4.3 | Undetermined |
| GHSA-6933-jpx5-q87q Flowise has unsandboxed remote code execution via Custom MCP | 2.2.7-patch.1 – < 3.0.6 | Undetermined |
| GHSA-69jq-qr7w-j7qh FlowiseAI Flowise arbitrary file upload vulnerability | ≤ 2.2.6 | Undetermined |
| GHSA-6f7g-v4pp-r667 Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise | < 3.1.0 | Undetermined |
| GHSA-6fw7-3q8r-m5vj FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource Reassignment | < 3.1.2 | Undetermined |
| GHSA-6pcv-j4jx-m4vx Flowise: Unauthenticated Information Disclosure of OAuth Secrets (Cleartext) via GET Request | < 3.1.0 | Undetermined |
| GHSA-6r77-hqx7-7vw8 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains | < 3.1.0 | Undetermined |
| GHSA-6vh2-wg4h-4vwj Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API | < 3.1.3 | Undetermined |
| GHSA-6wp6-22x5-rr3w Flowise vulnerable to code injection via api/v1 | < 1.8.1 | Undetermined |
| GHSA-728h-4mwj-f2p4 FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover | < 3.1.2 | Undetermined |
| GHSA-78pr-c5x5-jggc FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover | < 3.1.2 | Undetermined |
| GHSA-7944-7c6r-55vv FlowiseAI Pre-Auth Arbitrary Code Execution | 3.0.5 – < 3.0.6 | Undetermined |
| GHSA-7g73-99r4-m4mj FlowiseAI Vulnerable to Credential Data Leak | < 3.1.2 | Undetermined |
| GHSA-7j65-65cr-6644 FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover | < 3.1.2 | Undetermined |
| GHSA-7r4h-vmj9-wg42 Flowise Stored XSS vulnerability through logs in chatbot | < 3.0.5 | Undetermined |
| GHSA-858c-qxvx-rg9v Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id | ≤ 1.4.3 | Undetermined |
| GHSA-88pr-878c-24wf Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys | < 3.1.3 | Undetermined |
| GHSA-8f47-4rh3-x44m Flowise: Bcrypt Password Hash Exposure | ≤ 3.0.12 | Undetermined |
| GHSA-8gj2-2cvc-6xx7 Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private Chatflow TTS Credentials | < 3.1.4 | Undetermined |
| GHSA-8r8h-6vcc-xhrv Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure | < 3.1.3 | Undetermined |
| GHSA-8vvx-qvq9-5948 Flowise allows arbitrary file write to RCE | ≤ 2.2.7 | Undetermined |
| GHSA-964p-j4gg-mhwc Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel | < 3.0.8 | Undetermined |
| GHSA-99pg-hqvx-r4gf Flowise has an Arbitrary File Read | 3.0.5 – < 3.0.6 | Undetermined |
| GHSA-9c4c-g95m-c8cp FlowiseDB vulnerable to SQL Injection by authenticated users | ≤ 2.2.7 | Undetermined |
| GHSA-9gvv-qjj3-2p6g Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium | < 3.1.3 | Undetermined |
| GHSA-9hrv-gvrv-6gf2 Flowise Execute Flow function has an SSRF vulnerability | < 3.1.0 | Undetermined |
| GHSA-9rvc-vf7m-pgm2 FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape | < 3.1.2 | Undetermined |
| GHSA-9wc7-mj3f-74xv Flowise: Code Injection in CSVAgent leads to Authenticated RCE | < 3.1.0 | Undetermined |
| GHSA-c2c9-mfw7-p8hw Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows | < 3.1.2 | Undetermined |
| GHSA-c6xh-wv4j-ppv5 Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses | < 3.1.3 | Undetermined |
| GHSA-c9gw-hvqq-f33r Flowise: Authenticated RCE Via MCP Adapters | < 3.1.0 | Undetermined |
| GHSA-cc4f-hjpj-g9p8 Flowise: Weak Default JWT Secrets | < 3.1.0 | Undetermined |
| GHSA-chm3-vqcf-52rx Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store | < 3.1.3 | Undetermined |
| GHSA-cvrr-qhgw-2mm6 Flowise: Parameter Override Bypass Remote Command Execution | < 3.1.0 | Undetermined |
| GHSA-cwc3-p92j-g7qm Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration | < 3.0.13 | Undetermined |
| GHSA-f228-chmx-v6j6 Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`. | < 3.1.0 | Undetermined |
| GHSA-f6hc-c5jr-878p Flowise: resetPassword Authentication Bypass Vulnerability | < 3.1.0 | Undetermined |
| GHSA-fccx-2pwj-hrq7 Flowise Cross-site Scripting in /api/v1/public-chatflows/id | ≤ 1.4.3 | Undetermined |
| GHSA-fm2f-4339-4p2f Flowise: Missing Authorization on Execution Update Endpoint | < 3.1.3 | Undetermined |
| GHSA-fr6g-7cq8-fg82 Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history | < 3.1.3 | Undetermined |
| GHSA-fvcw-9w9r-pxc7 Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access | < 3.0.13 | Undetermined |
| GHSA-g32j-mmxr-gfq5 Flowise RCE via TypeORM DataSource | < 3.1.3 | Undetermined |
| GHSA-gmmw-qg98-6j6p Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation | < 3.1.3 | Undetermined |
| GHSA-h42x-xx2q-6v6g Flowise Pre-auth Arbitrary File Upload | ≤ 2.2.7 | Undetermined |
| GHSA-h997-3fxj-p5j8 Flowise Path Injection at /api/v1/openai-assistants-file | ≤ 1.4.3 | Undetermined |
| GHSA-hmg2-jjjx-jcp2 FlowiseAI: Vector Store No Permission Checks | < 3.1.2 | Undetermined |
| GHSA-hmgh-466j-fx4c Flowise vulnerable to RCE via Dynamic function constructor injection | ≤ 2.2.7-patch.1 | Undetermined |
| GHSA-hp26-q66v-q2w7 FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource Reassignment | < 3.1.2 | Undetermined |
| GHSA-hr92-4q35-4j3m FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability | 3.0.5 – < 3.0.6 | Undetermined |
| GHSA-j44m-5v8f-gc9c Flowise is vulnerable to arbitrary file exposure through its ReadFileTool | < 3.0.8 | Undetermined |
| GHSA-j8g8-j7fc-43v6 Flowise has Arbitrary File Upload via MIME Spoofing | < 3.0.13 | Undetermined |
| GHSA-jc5m-wrp2-qq38 Flowise Vulnerable to PII Disclosure on Unauthenticated Forgot Password Endpoint | < 3.0.13 | Undetermined |
| GHSA-jv9m-vf54-chjj Flowise is vulnerable to arbitrary file write through its WriteFileTool | < 3.0.8 | Undetermined |
| GHSA-m5p9-xvxj-64c8 Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting | < 2.1.1 | Undetermined |
| GHSA-m7mq-85xj-9x33 Flowise: Weak Default Token Hash Secret | < 3.1.0 | Undetermined |
| GHSA-m837-xvxr-vqwg Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage | < 3.1.2 | Undetermined |
| GHSA-m99r-2hxc-cp3q Flowise has an MCP Security Bypass that Enables RCE | < 3.1.2 | Undetermined |
| GHSA-mq4r-h2gh-qv7x Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint | < 3.0.13 | Undetermined |
| GHSA-mq53-pc65-wjc4 FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover | < 3.1.2 | Undetermined |
| GHSA-p5w8-m249-4r4v Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type | < 3.1.3 | Undetermined |
| GHSA-php6-83fg-gw3g FlowiseAI Exposes Basic Auth Credentials via API | < 3.1.2 | Undetermined |
| GHSA-q67q-549q-p849 Flowise has arbitrary file access due to missing chat flow id validation | 2.2.8 – < 3.0.6 | Undetermined |
| GHSA-qgvm-j2hm-6m38 Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service | < 3.1.3 | Undetermined |
| GHSA-qqvm-66q4-vf5c Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) | < 3.1.0 | Undetermined |
| GHSA-r4hh-pcgx-j5r2 Flowise: Authenticated Command Execution and Sandbox Bypass via Puppeteer and Playwright Packages | 3.0.1 – < 3.0.8 | Undetermined |
| GHSA-r745-8hwv-h473 Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration | < 3.1.3 | Undetermined |
| GHSA-rh7v-6w34-w2rr Flowise: File Upload Validation Bypass in createAttachment | < 3.1.0 | Undetermined |
| GHSA-rwrp-9823-p2xq Flowise: Incomplete Credential Redaction Exposes Secrets via API | < 3.1.3 | Undetermined |
| GHSA-v38x-c887-992f Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability | < 3.1.0 | Undetermined |
| GHSA-v5w9-prxf-w882 Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register) | 3.0.1 | Not affected |
| GHSA-vmv7-4m6c-3cg5 Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified | < 3.1.3 | Undetermined |
| GHSA-w47f-j8rh-wx87 Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs | < 3.1.0 | Undetermined |
| GHSA-w6v6-49gh-mc9w Flowise: Path Traversal in Vector Store basePath | < 3.1.0 | Undetermined |
| GHSA-w7x8-q2gp-5cgg Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass | < 3.1.3 | Undetermined |
| GHSA-wch5-xp77-fxg4 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak | < 3.1.3 | Undetermined |
| GHSA-wg86-r78f-74mp Flowise Sandbox Escape to RCE | < 3.1.3 | Undetermined |
| GHSA-wgpv-6j63-x5ph Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover | < 3.0.6 | Undetermined |
| GHSA-wp74-f5hh-5f3r Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization | < 3.1.3 | Undetermined |
| GHSA-wvhq-wp8g-c7vq Flowise has Authorization Bypass via Spoofed x-request-from Header | < 3.0.13 | Undetermined |
| GHSA-wxm4-9f8p-gggv Flowise Cross-site Scripting in/api/v1/credentials/id | ≤ 1.4.3 | Undetermined |
| GHSA-wxrr-jp8m-qq7f FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover | < 3.1.2 | Undetermined |
| GHSA-x2g5-fvc2-gqvp Flowise has Insufficient Password Salt Rounds | < 3.0.13 | Undetermined |
| GHSA-x3hf-7cj6-3r4m Flowise RCE via SQLite Record Manager Node | < 3.1.3 | Undetermined |
| GHSA-x5v6-pj28-cwwm FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource Reassignment | < 3.1.2 | Undetermined |
| GHSA-x5w6-38gp-mrqh Flowise: Password Reset Link Sent Over Unsecured HTTP | < 3.1.0 | Undetermined |
| GHSA-x6vm-w76m-8j7g Flowise: Remote Code Execution Vulnerability in CSVAgent | < 3.1.3 | Undetermined |
| GHSA-x7rp-qj2h-ghgw Flowise Fails to Invalidate Existing Sessions After Password Changes | < 3.0.10 | Undetermined |
| GHSA-xc48-889x-5qmw Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) | < 3.1.3 | Undetermined |
| GHSA-xhmj-rg95-44hv Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox | < 3.1.0 | Undetermined |
Withdrawn advisories (7)
Withdrawn by their publisher: they affect no version and are not counted above.
- GHSA-3g4j-r53p-22wx Duplicate Advisory: FlowiseAI Pre-Auth Arbitrary Code Execution · withdrawn
- GHSA-5w6g-rc45-wvv9 Duplicate Advisory: Flowise OverrideConfig security vulnerability · withdrawn
- GHSA-6j9g-8fxc-25hq Duplicate Advisory: Flowise contains an unauthenticated sandbox escape · withdrawn
- GHSA-7rgr-72hp-9wp3 Duplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel · withdrawn
- GHSA-q4xx-mc3q-23x8 Duplicate Advisory: Flowise vulnerable to RCE via Dynamic function constructor injection · withdrawn
- GHSA-w4hm-rrxg-pxcf Duplicate Advisory: Flowise Execute Flow function has an SSRF vulnerability · withdrawn
- GHSA-wq95-wr7m-26h4 Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot · withdrawn
Sources
| Source | Licence |
|---|