Open Source Flowise <3.1.4

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

8critical27high3medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-69254US	high8.8	0.69% (53rd)	Exploit	no fix	2026-08-04	—
CVE-2026-69263US	critical9.8	0.66% (51st)	Exploit	no fix	2026-08-04	—
CVE-2026-69251US	high8.8	2.74% (86th)	—	no fix	2026-08-04	—
CVE-2026-69264US	critical9.8	1.11% (66th)	—	no fix	2026-08-04	—
CVE-2026-73601US	high8.8	1.10% (65th)	—	no fix	2026-08-13	—
CVE-2026-69256US	high8.8	1.01% (63rd)	—	no fix	2026-08-04	—
CVE-2026-70470US	critical9.8	0.97% (62nd)	—	no fix	2026-08-04	—
CVE-2026-73487US	critical9.8	0.96% (61st)	—	no fix	2026-08-13	—
CVE-2026-73602US	critical9.9	0.83% (57th)	—	no fix	2026-08-13	—
CVE-2026-69259US	high8.8	0.82% (57th)	—	no fix	2026-08-04	—
CVE-2026-70477US	critical9.8	0.81% (57th)	—	no fix	2026-08-04	—
CVE-2026-91934US	high8.8	0.74% (54th)	—	no fix	2026-09-15	—
CVE-2026-91932US	—	0.73% (54th)	—	no fix	2026-09-15	—
CVE-2026-91931US	high8.5	0.68% (52nd)	—	no fix	2026-09-15	—
CVE-2026-69258US	critical9.1	0.67% (52nd)	—	no fix	2026-08-04	—
CVE-2026-69253US	high8.8	0.66% (52nd)	—	no fix	2026-08-04	—
CVE-2026-73486US	high8.8	0.66% (51st)	—	no fix	2026-08-13	—
CVE-2026-73483US	high8.8	0.62% (50th)	—	no fix	2026-08-13	—
CVE-2026-70478US	critical10.0	0.61% (49th)	—	no fix	2026-08-04	—
CVE-2026-69255US	high8.8	0.60% (49th)	—	no fix	2026-08-04	—
CVE-2026-73485US	high8.8	0.60% (48th)	—	no fix	2026-08-13	—
CVE-2026-69250US	high7.5	0.57% (47th)	—	no fix	2026-08-04	—
CVE-2026-69252US	high8.8OT elevated	0.54% (45th)	—	no fix	2026-08-04	—
CVE-2026-69262US	high8.1OT elevated	0.52% (44th)	—	no fix	2026-08-04	—
CVE-2026-70476US	high8.2	0.52% (44th)	—	no fix	2026-08-04	—
CVE-2026-70472US	high8.8OT elevated	0.52% (44th)	—	no fix	2026-08-04	—
CVE-2026-70474US	high8.1OT elevated	0.48% (41st)	—	no fix	2026-08-04	—
CVE-2026-91937US	high7.5	0.47% (40th)	—	no fix	2026-09-15	—
CVE-2026-91936US	medium6.8	0.46% (40th)	—	no fix	2026-09-15	—
CVE-2026-70475US	medium6.5OT elevated	0.46% (40th)	—	no fix	2026-08-04	—
CVE-2026-70473US	high8.5OT elevated	0.45% (39th)	—	no fix	2026-08-04	—
CVE-2026-73484US	high8.1	0.43% (38th)	—	no fix	2026-08-13	—
CVE-2026-69257US	high8.6	0.43% (37th)	—	no fix	2026-08-04	—
CVE-2026-70471US	medium6.5OT elevated	0.41% (35th)	—	no fix	2026-08-04	—
CVE-2026-91930US	high7.5	0.40% (34th)	—	no fix	2026-09-15	—
CVE-2026-91935US	high8.3	0.39% (33rd)	—	no fix	2026-09-15	—
CVE-2026-91938US	high7.1	0.37% (31st)	—	no fix	2026-09-15	—
CVE-2026-91933US	high7.1	0.35% (29th)	—	no fix	2026-09-15	—
CVE-2026-91929US	high7.1OT elevated	0.35% (29th)	—	no fix	2026-09-15	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')10 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-862Missing Authorization4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')4 CVEs
CWE-184Incomplete List of Disallowed Inputs3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan