Description
Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | flowise | >= 3.0.5, < 3.0.6 | 3.0.6 | GHSA-7944-7c6r-55vv |
Advisories 1
- WID-SEC-2025-2337 Flowise: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Oct 19, 2025