flowise vulnerabilities (npm)
115 vulnerabilities.
flowisenpmFlowise - SQL Injection in importChatflows API via chatflow.id Parameter8.5 HighflowisenpmFlowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API10.0 CriticalflowisenpmFlowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint9.3 CriticalflowisenpmFlowiseAI Flowise arbitrary file upload vulnerability9.8 CriticalflowisenpmFlowise - Remote Code Execution via overrideConfig Parameter9.3 CriticalflowisenpmFlowise Stored Cross-Site Scripting9.6 CriticalflowisenpmFlowise Authentication Bypass9.8 CriticalflowisenpmFlowise Denial of Service7.5 HighflowisenpmGHSL-2023-248: Flowise xss in /api/v1/credentials/id6.1 MediumflowisenpmGHSL-2023-247: Flowise xss in /api/v1/chatflows-streaming/id6.1 MediumflowisenpmGHSL-2023-246: Flowise xss in /api/v1/public-chatflows/id6.1 MediumflowisenpmGHSL-2023-245: Flowise xss in api/v1/chatflows/id6.1 MediumflowisenpmGHSL-2023-234: Flowise Cors Misconfiguration in packages/server/src/index.ts7.5 HighflowisenpmGHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file7.5 HighflowisenpmFlowise vulnerable to code injection via api/v17.6 High