Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

flowiseai/flowise

              main @ 71b01d8
            

141

Fixes

CVEs

CRITICAL

Peak severity

27.0%

Coverage

Highlights

Auth Bypass: 27 prior fixes. Scrutinize any change in this area.

packages/components/src/utils.ts: most-fixed (9 issues). Treat as high-risk during review.

103 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Untrusted, LLM-generated Python scripts are validated and executed using Pyodide. Attackers routinely found sandbox bypasses utilizing Unicode homoglyphs, AST manipulation, and reflection tricks to execute arbitrary system commands.

Mass Assignment: Widespread use of unsafe Object.assign operations on untrusted request payloads allowed authenticated users to overwrite workspace identifiers, resulting in complete tenant isolation collapse across datasets, evaluators, assistants, and tools.

Server-Side Request Forgery: Outgoing network connectors and webhook callback dispatchers could be manipulated to target internal cloud metadata endpoints and local loopback ranges. Defenses suffered from DNS rebinding and incomplete IPv4-mapped IPv6 normalization.