gitlab/npm/flowise/CVE-2025-55346
Flowise vulnerable to RCE via Dynamic function constructor injection
User-controlled input flows to an unsafe implementaion of a dynamic Function constructor , allowing a malicious actor to run JS code in the context of the host (not sandboxed) leading to RCE.