Known vulnerabilities in Flowise - page 7

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 5
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 130 known vulnerabilities: 18 high, 77 medium, 35 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-50538
CWE-79 Medium
No
No
3.0.8 04.05.2026 SB2026050497
#VU129614 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2025-71331
CWE-80 Medium
No
No
3.0.8 04.05.2026 SB2026050497
#VU125539 - Server-Side Request Forgery (SSRF)
CVE-2025-59527
CWE-918 Medium
No
No
3.0.6 09.04.2026 SB2026040911
#VU125538 - Improper Access Control
CVE-2025-58434
CWE-284 High
Available
Exploited
3.0.6 09.04.2026 SB2026040911
#VU129622 - SQL Injection: Hibernate
CVE-2025-71332
CWE-564 Low
No
No
2.2.8 07.04.2025 SB2025040767
#VU129625 - Improper Access Control
CVE-2024-58351
CWE-284 High
No
No
2.1.4 21.11.2024 SB2024112181
#VU129626 - Protection Mechanism Failure
CWE-693 High
No
No
2.1.4 21.11.2024 SB2024112181
#VU129627 - Improper Access Control
CWE-284 Medium
No
No
2.1.4 21.11.2024 SB2024112181
#VU129628 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
2.1.4 21.11.2024 SB2024112181
#VU129629 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
2.1.4 21.11.2024 SB2024112181


Showing elements 121 - 140 out of 130