# flowise-components (npm) vulnerabilities 30 known vulnerabilities (18 critical, 9 high, 3 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 3.1.4 (Jul 29, 2026): no advisory affects it - Newest unaffected release: 3.1.4 (Jul 29, 2026), the latest release - Weekly downloads: 3,716 - Dependents: 3 - Releases: 112 since 1.0.0 (Apr 10, 2023) - Registry: https://www.npmjs.com/package/flowise-components - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-119978: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-73487: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-73483: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-70477: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-70470: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69264: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69263: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69259: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69256: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69255: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69254: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69253: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-69251: 1.0.0 to 3.1.2 (3.1.3 is outside it) - CVE-2026-56273: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-56275: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-56274: 1.0.0 to 3.1.1 (3.1.2 is outside it) - CVE-2026-43995: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41274: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41264: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41265: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41271: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41272: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41270: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41268: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41137: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-41138: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-40933: 1.0.0 to 3.0.13 (3.1.0 is outside it) - CVE-2026-31829: 1.0.0 to 3.0.12 (3.0.13 is outside it) - CVE-2025-61913: 1.0.0 to 3.0.7 (3.0.8 is outside it) - CVE-2025-29189: 1.0.0 to 2.2.3 (2.2.4 is outside it) ## Advisories (30) ### [CVE-2026-119978](https://cve.now/CVE-2026-119978): Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore - Severity: Critical 9.0 - Published: Oct 30, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 127 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-73487](https://cve.now/CVE-2026-73487): Flowise before 3.1.3 Prompt Injection RCE via CSV Agent - Severity: Critical 9.0 - Published: Aug 13, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-73483](https://cve.now/CVE-2026-73483): Flowise before 3.1.3 Sandbox Escape via Puppeteer - Severity: Critical 9.4 - Published: Aug 13, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 49 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-70477](https://cve.now/CVE-2026-70477): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability - Severity: Critical 9.5 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-70470](https://cve.now/CVE-2026-70470): Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE - Severity: Critical 9.5 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69264](https://cve.now/CVE-2026-69264): Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation - Severity: Critical 9.4 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69263](https://cve.now/CVE-2026-69263): Flowise: CVE-2025-8943 Patch Bypass: npm\_config\_yes bypasses MCP environment variable blocklist (Unauthenticated RCE) - Severity: High 8.7 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69259](https://cve.now/CVE-2026-69259): Flowise RCE via SQLite Record Manager Node - Severity: Critical 9.4 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69256](https://cve.now/CVE-2026-69256): Flowise: Remote Code Execution Vulnerability in CSVAgent - Severity: Critical 9.4 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69255](https://cve.now/CVE-2026-69255): Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified - Severity: Critical 9.2 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69254](https://cve.now/CVE-2026-69254): Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override - Severity: Critical 9.4 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69253](https://cve.now/CVE-2026-69253): Flowise Sandbox Escape to RCE - Severity: Critical 9.0 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-69251](https://cve.now/CVE-2026-69251): Flowise RCE via TypeORM DataSource - Severity: Critical 9.0 - Published: Aug 4, 2026 - Affected: fixed in 3.1.3. - Fixed in 3.1.3 (released Jun 25, 2026, 40 days before disclosure). - The latest release, 3.1.4, is not affected. - 73% of flowise-components downloads last week were affected versions (4.3K). ### [CVE-2026-56273](https://cve.now/CVE-2026-56273): Flowise - Path Traversal in Vector Store basePath Parameter - Severity: Medium 4.9 - Published: Jul 8, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 114 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-56275](https://cve.now/CVE-2026-56275): Flowise - Server-Side Request Forgery via Execute Flow Base URL - Severity: Medium 6.0 - Published: Jun 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 99 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-56274](https://cve.now/CVE-2026-56274): Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess - Severity: High 8.7 - Published: Jun 23, 2026 - Affected: fixed in 3.1.2. - Fixed in 3.1.2 (released Apr 14, 2026, 70 days before disclosure). - The latest release, 3.1.4, is not affected. - 70% of flowise-components downloads last week were affected versions (4.1K). ### [CVE-2026-43995](https://cve.now/CVE-2026-43995): Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure) - Severity: Medium 5.3 - Published: May 11, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 56 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41274](https://cve.now/CVE-2026-41274): Flowise: Cypher Injection in GraphCypherQAChain - Severity: Critical 9.3 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41264](https://cve.now/CVE-2026-41264): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability - Severity: Critical 9.2 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41265](https://cve.now/CVE-2026-41265): Flowise: Airtable\_Agent Code Injection Remote Code Execution Vulnerability - Severity: Critical 9.2 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41271](https://cve.now/CVE-2026-41271): Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains - Severity: High 7.1 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41272](https://cve.now/CVE-2026-41272): Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) - Severity: High 7.1 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41270](https://cve.now/CVE-2026-41270): Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox - Severity: High 7.1 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41268](https://cve.now/CVE-2026-41268): Flowise: Flowise Parameter Override Bypass Remote Command Execution - Severity: High 7.7 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41137](https://cve.now/CVE-2026-41137): Flowise: Code Injection in CSVAgent leads to Authenticated RCE - Severity: Critical 9.4 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-41138](https://cve.now/CVE-2026-41138): Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using Pandas. - Severity: High 8.3 - Published: Apr 23, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 38 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-40933](https://cve.now/CVE-2026-40933): Flowise: Authenticated RCE Via MCP Adapters - Severity: Critical 10.0 - Published: Apr 21, 2026 - Affected: fixed in 3.1.0. - Fixed in 3.1.0 (released Mar 16, 2026, 36 days before disclosure). - The latest release, 3.1.4, is not affected. - 69% of flowise-components downloads last week were affected versions (4K). ### [CVE-2026-31829](https://cve.now/CVE-2026-31829): Flowise affected by Server-Side Request Forgery (SSRF) in HTTP Node Leading to Internal Network Access - Severity: High 7.1 - Published: Mar 10, 2026 - Affected: fixed in 3.0.13. - Fixed in 3.0.13 (released Feb 3, 2026, 35 days before disclosure). - The latest release, 3.1.4, is not affected. - 67% of flowise-components downloads last week were affected versions (3.9K). ### [CVE-2025-61913](https://cve.now/CVE-2025-61913): Flowise is vulnerable to arbitrary file read, arbitrary file write - Severity: Critical 10.0 - Published: Oct 8, 2025 - Affected: fixed in 3.0.8. - Fixed in 3.0.8 (released Oct 8, 2025, the day of disclosure). - The latest release, 3.1.4, is not affected. - 54% of flowise-components downloads last week were affected versions (3.2K). ### [CVE-2025-29189](https://cve.now/CVE-2025-29189): Flowise \<= 2.2.3 is vulnerable to SQL Injection. - Severity: High 7.6 - Published: Apr 9, 2025 - Affected: fixed in 2.2.4. - Fixed in 2.2.4 (released Jan 14, 2025, 85 days before disclosure). - The latest release, 3.1.4, is not affected. - 43% of flowise-components downloads last week were affected versions (2.5K). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/flowise-components Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.