Skip to content
OpenAdvisories

Package · npm

flowise-ui

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2025-71328

    Flowise - Unverified Password Change via Account Settings

    Flowise before 3.0.10 contains an unverified password change vulnerability. An authenticated user can change their account password through the account settings (Security) section without supplying the current password or any additional verification, as the a…

    Flowise Flowise flowise-ui npm
  • High 8.3
    CVE-2025-71337

    Flowise - Unverified Email Change via Account Profile Endpoint

    Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. An authenticated user can change the account email address, used as a login identifier and password-recovery channel, via the account profile endpoi…

    Flowise Flowise flowise-ui npm