Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Flowise — Vulnerabilities & Security Advisories 42

All 42 CVE vulnerabilities found in Flowise, with AI-generated Chinese analysis, references, and POCs.

Vendor: FlowiseAI

CVE IDTitleCVSSSeverityPublished
CVE-2025-59528 Flowise has Remote Code Execution vulnerability CWE-94 10.0 Critical2025-09-22
CVE-2025-59527 FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability CWE-918 7.5 High2025-09-22
CVE-2025-59434 Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function CWE-200 9.6 Critical2025-09-22
CVE-2025-58434 Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover CWE-306 9.8 Critical2025-09-12
CVE-2024-8181 Flowise Authentication Bypass 9.8 Critical2024-08-27
CVE-2024-8182 Flowise Denial of Service 7.5 High2024-08-27
CVE-2024-37146 GHSL-2023-248: Flowise xss in /api/v1/credentials/id CWE-79 6.1 Medium2024-07-01
CVE-2024-37145 GHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id CWE-79 6.1 Medium2024-07-01
CVE-2024-36423 GHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id CWE-79 6.1 Medium2024-07-01
CVE-2024-36422 GHSL-2023-245: Flowise xss in api/v1/chatflows/id CWE-79 6.1 Medium2024-07-01
CVE-2024-36421 GHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts CWE-346 7.5 High2024-07-01
CVE-2024-36420 GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file CWE-74 7.5 High2024-07-01

All 42 known CVE vulnerabilities affecting Flowise with full Chinese analysis, references, and POCs where available.