npm/flowise CVE-2025-71324: critical 9.1, EPSS 1.57%
Flowise has an Arbitrary File Read
Action: Upgrade flowise to 3.0.6 or later.
npm i flowise@3.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.5 | 3.0.6 | - |
Fixed versions
| 3.0.6 |
Sources
- osv: GHSA-99pg-hqvx-r4gf
- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-99pg-hqvx-r4gf
- https://github.com/FlowiseAI/Flowise
CVE-2025-71324 · published · modified · JSON