Search for packages
| purl | pkg:npm/flowise-components@1.3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-jv9m-vf54-chjj
Aliases: CVE-2025-61913 |
Flowise is vulnerable to arbitrary file write through its WriteFileTool ### Summary The WriteFileTool in Flowise does not restrict the … |
Vulnerable |
|
GHSA-j44m-5v8f-gc9c
|
Flowise is vulnerable to arbitrary file exposure through its ReadFileTool ### Summary The ReadFileTool in Flowise does not restrict file … |
Vulnerable |
|
GHSA-gjx9-wg9x-7gvp
Aliases: CVE-2025-29189 |
Flowise Vulnerable to SQL Injection via `tableName` Parameter Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at … |
Vulnerable |
|
GHSA-3hjv-c53m-58jj
Aliases: CVE-2026-41264 |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability ## Abstract Trend Micro's Zero Day Initiative has identified a vulnerability … |
Vulnerable |
|
GHSA-v38x-c887-992f
Aliases: CVE-2026-41265 |
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability ZDI-CAN-29412: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability Trend Micro's … |
Vulnerable |
|
GHSA-w6v6-49gh-mc9w
|
Flowise: Path Traversal in Vector Store basePath ## Summary The Faiss and SimpleStore (LlamaIndex) vector store implementations accept a `basePath` … |
Vulnerable |
|
GHSA-28g4-38q8-3cwc
Aliases: CVE-2026-41274 |
Flowise: Cypher Injection in GraphCypherQAChain ## Summary The GraphCypherQAChain node forwards user-provided input directly into the Cypher query execution pipeline … |
Vulnerable |
|
GHSA-c9gw-hvqq-f33r
Aliases: CVE-2026-40933 |
Flowise: Authenticated RCE Via MCP Adapters ### Summary Due to unsafe serialization of stdio commands in the MCP adapter, an … |
Vulnerable |
|
GHSA-qqvm-66q4-vf5c
Aliases: CVE-2026-43995 |
Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) ### Summary Flowise introduced SSRF protections through … |
Vulnerable |
|
GHSA-9wc7-mj3f-74xv
Aliases: CVE-2026-41137 |
Flowise: Code Injection in CSVAgent leads to Authenticated RCE ### Summary The CSVAgent allows providing a custom Pandas CSV read … |
Vulnerable |
|
GHSA-m99r-2hxc-cp3q
|
Flowise has an MCP Security Bypass that Enables RCE ## Summary There are three bypass methods for the security limitations … |
Vulnerable |
|
GHSA-cvrr-qhgw-2mm6
Aliases: CVE-2026-41268 |
Flowise: Parameter Override Bypass Remote Command Execution ### Summary Flowise is vulnerable to a critical unauthenticated remote command execution (RCE) … |
Vulnerable Vulnerable |
|
GHSA-6r77-hqx7-7vw8
Aliases: CVE-2026-41271 |
Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains ### Summary A Server-Side Request Forgery (SSRF) vulnerability exists in FlowiseAI's … |
Vulnerable Vulnerable |
|
GHSA-f228-chmx-v6j6
Aliases: CVE-2026-41138 |
Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`. ## Description ### Summary … |
Vulnerable Vulnerable |
|
GHSA-2x8m-83vc-6wv4
Aliases: CVE-2026-41272 |
Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) ### Summary The core security wrappers (secureAxiosRequest and secureFetch) intended to prevent … |
Vulnerable Vulnerable |
|
GHSA-xhmj-rg95-44hv
Aliases: CVE-2026-41270 |
Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox ### Summary A Server-Side Request Forgery (SSRF) … |
Vulnerable Vulnerable |
|
GHSA-fvcw-9w9r-pxc7
Aliases: CVE-2026-31829 |
Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access **Description:** Flowise exposes an HTTP … |
Vulnerable Vulnerable |
|
GHSA-4j8x-x6v7-w9rq
Aliases: CVE-2026-69264 |
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation ### Summary Flowise's `CSVAgent` … |
Not vulnerable |
|
GHSA-vmv7-4m6c-3cg5
Aliases: CVE-2026-69255 |
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified ## UPDATE 2026-05-20: Full RCE as … |
Not vulnerable |
|
GHSA-x6vm-w76m-8j7g
Aliases: CVE-2026-69256 |
Flowise: Remote Code Execution Vulnerability in CSVAgent ### Summary The CSVAgent node was observed to allow users to write Python … |
Not vulnerable |
|
GHSA-52fh-8v99-63c2
Aliases: CVE-2026-70470 |
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE ### Summary The validatePythonCodeForDataFrame blacklist in packages/components/src/pythonCodeValidator.ts can be bypassed with … |
Not vulnerable |
|
GHSA-wg86-r78f-74mp
Aliases: CVE-2026-69253 |
Flowise Sandbox Escape to RCE ============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: … |
Not vulnerable |
|
GHSA-g32j-mmxr-gfq5
Aliases: CVE-2026-69251 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via TypeORM DataSource Module: FlowiseAI/Flowise Disclosed: 15-Apr-2026 Credits: Alex Brown Affects: `FlowiseAI/Flowise 3.1.2` … |
Not vulnerable |
|
GHSA-x3hf-7cj6-3r4m
Aliases: CVE-2026-69259 |
============================================================================= Security Advisory elttam Topic: Flowise RCE via SQLite Record Manager Node Module: FlowiseAI/Flowise Disclosed: 24-Apr-2026 Credits: Alex Brown Affects: … |
Not vulnerable |
|
GHSA-xc48-889x-5qmw
Aliases: CVE-2026-69263 |
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) ## Summary The mitigation shipped for CVE-2025-8943 blocks … |
Not vulnerable |
|
GHSA-5xvg-pmgg-3mxr
Aliases: CVE-2026-70477 |
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a … |
Not vulnerable |
|
GHSA-88pr-878c-24wf
|
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys ## Summary Flowise on … |
Not vulnerable |
|
GHSA-3769-jgqc-cxm7
Aliases: CVE-2026-69254 |
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override ### Summary A sandbox escape vulnerability in `executeJavaScriptCode()` allows any … |
Not vulnerable |
|
GHSA-9hrv-gvrv-6gf2
Aliases: CVE-2026-56275 |
Flowise Execute Flow function has an SSRF vulnerability ### Summary The attacker provides an intranet address through the base url … |
Vulnerable Vulnerable |
|
GHSA-w7x8-q2gp-5cgg
Aliases: CVE-2026-73487 |
Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass ## Summary Flowise <= 3.1.2 CSV Agent … |
Not vulnerable |
|
GHSA-9gvv-qjj3-2p6g
Aliases: CVE-2026-73483 |
Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium Flowise (packages flowise and … |
Not vulnerable |
|
GHSA-6j9g-8fxc-25hq
|
Duplicate Advisory: Flowise contains an unauthenticated sandbox escape # Duplicate Advisory This advisory has been withdrawn because it is a … |
Not vulnerable |