Description
Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FlowiseAI | FlowiseChatEmbed | < 2.0.0 | 2.0.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | flowise | < 2.1.1 | 2.1.1 | GHSA-m5p9-xvxj-64c8 |
| npm | flowise-embed | < 2.0.0 | 2.0.0 | GHSA-m5p9-xvxj-64c8 |