npm/flowise CVE-2025-71327: high, EPSS 0.68%

Flowise has Authentication Bypass Using Unprotected Registration Endpoint (/register)

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-v5w9-prxf-w882
• https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-v5w9-prxf-w882
• https://github.com/FlowiseAI/Flowise

CVE-2025-71327 · published 2025-11-17T19:06:09Z · modified 2026-07-08T07:10:44.416807688Z · JSON