Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 117
Reset filtersFlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability
FlowiseAI Pre-Auth Arbitrary Code Execution
Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover
Flowise OS command remote code execution
Flowise Vulnerable to SQL Injection via `tableName` Parameter
FlowiseDB vulnerable to SQL Injection by authenticated users
Flowise allows arbitrary file write to RCE
Flowise Pre-auth Arbitrary File Upload
FlowiseAI Flowise arbitrary file upload vulnerability
Flowise OverrideConfig security vulnerability
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting
Flowise Unauthenticated Denial of Service (DoS) vulnerability
Flowise Authentication Bypass vulnerability
Flowise Cross-site Scripting in/api/v1/credentials/id
Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id
Flowise Cross-site Scripting in /api/v1/public-chatflows/id
Flowise Cross-site Scripting in api/v1/chatflows/id
Flowise Cors Misconfiguration in packages/server/src/index.ts
Flowise Path Injection at /api/v1/openai-assistants-file
Flowise vulnerable to code injection via api/v1
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.