CVE Tools
Track your stack

Flowiseai

125 CVEs tracked since 2024. Since Jul 2024, none of them reached CISA KEV.

Flowiseai CVEs per month

Jul 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Flowiseai CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0760
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-0940
2025-1060
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-04190
2026-057 or fewer
2026-06320
2026-077 or fewer
2026-08370
2026-09210
2026-103 or fewer

Products

The products that kept showing up in Flowiseai's monthly top three, with their CVEs summed over those months.

  1. Flowise1257 months
  2. Flowise-components72 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Flowiseai.

  1. CVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-history7.5
  2. CVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via Credential6.8
  3. CVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard8.3
  4. CVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO7.7
  5. CVE-2026-100605Flowise through 3.1.4 Missing Authorization via Chat Message Routes7.1
  6. CVE-2026-100606Flowise through 3.1.4 Authentication Bypass via SSO Email Match7.7
  7. CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loaders7.1
  8. CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionId7.5
  9. CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker Workflows6.8
  10. CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes8.3
  11. CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database Chain8.8
  12. CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtime7.1
  13. CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd Parameter8.5
  14. CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npx8.5
  15. CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover7.5

The record

Peak rank
#27 in Jun 2026
Busiest month shown
Aug 2026, 37 CVEs
Months with a KEV entry
0 since Jul 2024
Monthly snapshots
7 since 2024
Flowiseai's full record, month by month