CVE Tools
Track your stack

Flowiseai

119 CVEs tracked since 2024. Since Jul 2024, none of them reached CISA KEV.

Flowiseai CVEs per month

Jul 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Flowiseai CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0760
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02null or fewer
2025-03null or fewer
2025-04null or fewer
2025-05null or fewer
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-0940
2025-1060
2025-11null or fewer
2025-12null or fewer
2026-01null or fewer
2026-02null or fewer
2026-03null or fewer
2026-04190
2026-05null or fewer
2026-06320
2026-07null or fewer
2026-08370
2026-09150

Products

The products that kept showing up in Flowiseai's monthly top three, with their CVEs summed over those months.

  1. Flowise1197 months
  2. Flowise-components72 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Flowiseai.

  1. CVE-2026-100610Flowise through 3.1.4 Missing Authorization via upsert-history7.5
  2. CVE-2026-100609Flowise through 3.1.4 Insecure Direct Object Reference via Credential6.8
  3. CVE-2026-100608Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard8.3
  4. CVE-2026-100607Flowise through 3.1.4 Authentication Bypass via Email-Only SSO7.7
  5. CVE-2026-100606Flowise through 3.1.4 Authentication Bypass via SSO Email Match7.7
  6. CVE-2026-100605Flowise through 3.1.4 Missing Authorization via Chat Message Routes7.1
  7. CVE-2026-91938Flowise before 3.1.4 Server-Side Request Forgery via document loaders7.1
  8. CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionId7.5
  9. CVE-2026-91936Flowise before 3.1.4 Script Injection via Docker Workflows6.8
  10. CVE-2026-91935Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes8.3
  11. CVE-2026-91934Flowise before 3.1.4 Remote Code Execution via SQL Database Chain8.8
  12. CVE-2026-91933Flowise before 3.1.4 Authorization Bypass via openai-realtime7.1
  13. CVE-2026-91932Flowise before 3.1.4 Remote Code Execution via cwd Parameter8.5
  14. CVE-2026-91931Flowise before 3.1.4 Remote Code Execution via Custom MCP npx8.5
  15. CVE-2026-91930Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover7.5

The record

Peak rank
#27 in Jun 2026
Busiest month shown
Aug 2026, 37 CVEs
Months with a KEV entry
0 since Jul 2024
Monthly snapshots
7 since 2024
Flowiseai's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store