Flowise: Missing Authorization on Execution Update Endpoint
Affects: Flowise
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Flowise: Unauthenticated Credential Abuse via Text-to-Speech Endpoint Allows Unauthorized Use of Private…
Affects: Flowise
Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
Affects: Flowise
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert…
Affects: Flowise
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
Affects: Flowise
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Affects: Flowise
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
Affects: Flowise
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without…
Affects: Flowise
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files…
Affects: NVIDIA Triton Inference Server
Flowise: Incomplete Credential Redaction Exposes Secrets via API
Affects: Flowise
Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3…
Affects: Flowise
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist…
Affects: Flowise
Flowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and…
Affects: Flowise
Flowise: Flowise RCE via SQLite Record Manager Node
Affects: Flowise
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig`…
Affects: Flowise
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
Affects: Flowise
Flowise: Remote Code Execution Vulnerability in CSVAgent
Affects: Flowise
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection, Root Shell Verified
Affects: Flowise
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
Affects: Flowise
Flowise: Flowise Sandbox Escape to RCE
Affects: Flowise
Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files…
Affects: Flowise
Flowise: Flowise RCE via TypeORM DataSource
Affects: Flowise
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
Affects: Flowise
Flowise: IDOR vulnerability exists at the GET /api/v1/organization/customer-default-source endpoint
Affects: Flowise
Hugging Face Transformers: Transformers save_pretrained path traversal allows arbitrary file writes through chat template…
Affects: Hugging Face Transformers
Keras: HDF5 links can disclose local file contents
Affects: Keras
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS…
Affects: Langflow
Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel…
Affects: Open WebUI
n8n: Snowflake Node executeQuery Operation Allows SQL Injection via Unparameterized Expression…
Affects: n8n
n8n: PostgresTrigger Node SQL Injection Allows Authenticated Users to Execute Arbitrary SQL on…
Affects: n8n
n8n: Cross-Tenant Module-Cache Poisoning in the JS Task Runner
Affects: n8n
Jupyter: JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
Affects: Jupyter
Jupyter: JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
Affects: Jupyter
Jupyter: JupyterLab: PyPI extension blocklist package-name canonicalization bypass
Affects: Jupyter
Jupyter: JupyterLab PluginManager lock-rule enforcement bypass
Affects: Jupyter
Jupyter: JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for…
Affects: Jupyter
n8n: External Secrets Accessible via Workflow Expressions Outside Credentials
Affects: n8n
n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base…
Affects: n8n
n8n: Prototype Pollution via VM Expression Engine Sandbox Escape Leads to Denial of Service
Affects: n8n
n8n: Prototype Pollution via Dot-Notation Field Names Leads To Instance-Wide Denial of Service
Affects: n8n
n8n: Edit Image Node Format Injection Allows Arbitrary File Write
Affects: n8n
n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
Affects: n8n
n8n: Credential Authorization Bypass via Expression in HTTP Request Node `genericAuthType`
Affects: n8n