Known vulnerabilities in Flowise - page 7

Vendor: FlowiseAI
Software: Flowise
Software CPE: cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
Total vulnerabilities: 133
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flowise Flowise is affected by 133 known vulnerabilities: 20 high, 77 medium, 36 low Critical High Medium Low

Vulnerabilities (133)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129619 - Eval Injection
CVE-2025-55346
CWE-95 High
No
No
2.2.8 04.05.2026 SB2025040767
#VU125533 - Incorrect Authorization
CVE-2026-30820
CWE-863 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125532 - Unrestricted Upload of File with Dangerous Type
CVE-2026-30821
CWE-434 Medium
No
No
3.0.13 09.04.2026 SB2026040908
#VU125531 - Server-Side Request Forgery (SSRF)
CVE-2026-31829
CWE-918 Low
No
No
3.0.13 09.04.2026 SB2026040908
#VU129622 - SQL Injection: Hibernate
CVE-2025-71332
CWE-564 Low
No
No
2.2.8 07.04.2025 SB2025040767
#VU129623 - Unrestricted Upload of File with Dangerous Type
CVE-2025-71333
CWE-434 High
No
No
2.2.5 13.03.2025 SB2025031350
#VU129625 - Improper Access Control
CVE-2024-58351
CWE-284 High
No
No
2.1.4 21.11.2024 SB2024112181
#VU129626 - Protection Mechanism Failure
CWE-693 High
No
No
2.1.4 21.11.2024 SB2024112181
#VU129627 - Improper Access Control
CWE-284 Medium
No
No
2.1.4 21.11.2024 SB2024112181
#VU129628 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
2.1.4 21.11.2024 SB2024112181
#VU129629 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
2.1.4 21.11.2024 SB2024112181
#VU96579 - Improper Authentication
CVE-2024-8181
CWE-287 Medium
No
No
- 28.08.2024 SB2024082819
#VU96578 - Improper input validation
CVE-2024-8182
CWE-20 Medium
No
No
- 28.08.2024 SB2024082819


Showing elements 121 - 140 out of 133