Skip to main content
cve.nowby Sazabi
← npm
npmPackage

flowise-components

30 known vulnerabilities (18 critical, 9 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
3.1.4 (Jul 29, 2026): no advisory affects it
Newest unaffected release
3.1.4 (Jul 29, 2026), the latest release
Advisories
30 · 18 critical, 9 high, 3 medium
Weekly downloads
3,716
Dependents
3
Releases
112 since 1.0.0 (Apr 10, 2023)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Show all 30 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 30

  • CVE-2026-119978Critical 9.0

    Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 127 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-73487Critical 9.0

    Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-73483Critical 9.4

    Flowise before 3.1.3 Sandbox Escape via Puppeteer

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-70477Critical 9.5

    Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-70470Critical 9.5

    Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69264Critical 9.4

    Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69259Critical 9.4

    Flowise RCE via SQLite Record Manager Node

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69256Critical 9.4

    Flowise: Remote Code Execution Vulnerability in CSVAgent

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69255Critical 9.2

    Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69254Critical 9.4

    Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69253Critical 9.0

    Flowise Sandbox Escape to RCE

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-69251Critical 9.0

    Flowise RCE via TypeORM DataSource

    Affected: fixed in 3.1.3.

    Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure).

    The latest release, 3.1.4, is not affected.

    73% of flowise-components downloads last week were affected versions (4.3K).

  • CVE-2026-56273Medium 4.9

    Flowise - Path Traversal in Vector Store basePath Parameter

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 114 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-56275Medium 6.0

    Flowise - Server-Side Request Forgery via Execute Flow Base URL

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 99 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

Show all 30 advisoriesShow fewer advisories

  • Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

    Affected: fixed in 3.1.2.

    Fixed in 3.1.2 (released Apr 14, 2026, 70 days before disclosure).

    The latest release, 3.1.4, is not affected.

    70% of flowise-components downloads last week were affected versions (4.1K).

  • CVE-2026-43995Medium 5.3

    Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 56 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-41274Critical 9.3

    Flowise: Cypher Injection in GraphCypherQAChain

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-41264Critical 9.2

    Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-41265Critical 9.2

    Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise: Flowise Parameter Override Bypass Remote Command Execution

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-41137Critical 9.4

    Flowise: Code Injection in CSVAgent leads to Authenticated RCE

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas.

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • CVE-2026-40933Critical 10.0

    Flowise: Authenticated RCE Via MCP Adapters

    Affected: fixed in 3.1.0.

    Fixed in 3.1.0 (released Mar 16, 2026, 36 days before disclosure).

    The latest release, 3.1.4, is not affected.

    69% of flowise-components downloads last week were affected versions (4K).

  • Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access

    Affected: fixed in 3.0.13.

    Fixed in 3.0.13 (released Feb 3, 2026, 35 days before disclosure).

    The latest release, 3.1.4, is not affected.

    67% of flowise-components downloads last week were affected versions (3.9K).

  • CVE-2025-61913Critical 10.0

    Flowise is vulnerable to arbitrary file read, arbitrary file write

    Affected: fixed in 3.0.8.

    Fixed in 3.0.8 (released Oct 8, 2025, the day of disclosure).

    The latest release, 3.1.4, is not affected.

    54% of flowise-components downloads last week were affected versions (3.2K).

  • Flowise <= 2.2.3 is vulnerable to SQL Injection.

    Affected: fixed in 2.2.4.

    Fixed in 2.2.4 (released Jan 14, 2025, 85 days before disclosure).

    The latest release, 3.1.4, is not affected.

    43% of flowise-components downloads last week were affected versions (2.5K).