{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.0.5"}],"component":"flowise","cve_ids":["CVE-2025-8943"],"ecosystem":"npm","epss":0.75203,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2vv2-3x8x-4gv7","id":"tcs_01M5KEV6RJVAKF0DF90VSH6RT6","modified_at":"2025-08-18T21:07:48Z","published_at":"2025-08-14T12:30:23Z","references":["https://osv.dev/vulnerability/GHSA-2vv2-3x8x-4gv7","https://nvd.nist.gov/vuln/detail/CVE-2025-8943","https://github.com/FlowiseAI/Flowise","https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2vv2-3x8x-4gv7","url":"https://osv.dev/vulnerability/GHSA-2vv2-3x8x-4gv7"}],"summary":"Flowise OS command remote code execution"}