Known vulnerabilities in Flowise - page 3

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146556 - Cleartext Storage of Sensitive Information
CWE-312 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146557 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU146558 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146559 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146555 - Server-Side Request Forgery (SSRF)
CVE-2026-91938
CWE-918 Low
No
No
3.1.4 01.09.2026 SB2026083134
#VU146554 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-91937
CWE-943 Medium
No
No
3.1.4 01.09.2026 SB2026083134
#VU140063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140062 - Missing Authorization
CVE-2026-69252
CWE-862 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140061 - Incorrect Authorization
CVE-2026-69262
CWE-863 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU140060 - Improper input validation
CVE-2026-73486
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140059 - Improper input validation
CVE-2026-73485
CWE-20 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140058 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-70477
CWE-74 High
No
No
3.1.3 30.07.2026 SB20260727343
#VU140057 - Improper Access Control
CVE-2026-69259
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140056 - Eval Injection
CVE-2026-69264
CWE-95 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140055 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-69255
CWE-94 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140054 - Incomplete List of Disallowed Inputs
CVE-2026-73484
CWE-184 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140052 - Improper Access Control
CVE-2026-73483
CWE-284 Medium
No
No
3.1.3 30.07.2026 SB20260727343
#VU140053 - Improper Access Control
CWE-284 Low
No
No
3.1.3 30.07.2026 SB20260727343
#VU139753 - Exposure of sensitive information to an unauthorized actor
CVE-2026-73604
CWE-200 Low
No
No
3.1.3 27.07.2026 SB20260727343
#VU139751 - Authorization Bypass Through User-Controlled Key
CVE-2026-73488
CWE-639 Low
No
No
3.1.3 27.07.2026 SB20260727343


Showing elements 41 - 60 out of 130