FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46479 · GHSA-mq53-pc65-wjc4 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46479 · GHSA-mq53-pc65-wjc4 · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46478 · GHSA-7j65-65cr-6644 · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46477 · GHSA-5h9v-837x-m97r · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46476 · GHSA-728h-4mwj-f2p4 · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46475 · GHSA-78pr-c5x5-jggc · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46444 · GHSA-hmg2-jjjx-jcp2 · amended
PyPI matrix-synapse · Upgrade to 1.152.1 or later · < 1.152.1 · CVE-2026-45078 · GHSA-8q93-326v-3m7g · amended
npm n8n · Upgrade to 2.21.1, 2.20.7 or 1.123.43 by release line · < 1.123.43; >= 2.21.0, < 2.21.1; >= 2.0.0-rc.0, < 2.20.7 · CVE-2026-45732 · GHSA-6h4j-wcr9-2vg7 · amended
npm n8n · Upgrade to 2.21.1, 2.20.7 or 1.123.43 by release line · < 1.123.43; >= 2.21.0, < 2.21.1; >= 2.0.0-rc.0, < 2.20.7 · CVE-2026-44792 · GHSA-mhrx-qhrj-673w · amended
npm n8n · Upgrade to 2.22.1, 2.20.7 or 1.123.43 by release line · < 1.123.43; >= 2.21.0, < 2.22.1; >= 2.0.0-rc.0, < 2.20.7 · CVE-2026-44791 · GHSA-wrwr-h859-xh2r · amended
npm n8n · Upgrade to 2.22.1, 2.20.7 or 1.123.43 by release line · < 1.123.43; >= 2.21.0, < 2.22.1; >= 2.0.0-rc.0, < 2.20.7 · CVE-2026-44790 · GHSA-57g9-58c2-xjg3 · amended
npm n8n · Upgrade to 2.22.1, 2.20.7 or 1.123.43 by release line · < 1.123.43; >= 2.21.0, < 2.22.1; >= 2.0.0-rc.0, < 2.20.7 · CVE-2026-44789 · GHSA-c8xv-5998-g76h · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46443 · GHSA-7g73-99r4-m4mj · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46442 · GHSA-9rvc-vf7m-pgm2 · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46441 · GHSA-hp26-q66v-q2w7 · amended
npm flowise +1 · Upgrade all 2 to 3.1.2 or later · <= 3.1.1 · CVE-2026-56274 · GHSA-m99r-2hxc-cp3q · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-46440 · GHSA-php6-83fg-gw3g · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42863 · GHSA-5wxp-qjgq-fx6m · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42862 · GHSA-x5v6-pj28-cwwm · amended
npm flowise · Upgrade to 3.1.2 or later · <= 3.1.1 · CVE-2026-42861 · GHSA-6fw7-3q8r-m5vj · amended
npm @strapi/strapi · Upgrade to 5.37.0 or later · >= 4.0.0, < 5.37.0 · CVE-2026-27886 · GHSA-rjg2-95x7-8qmx · amended
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.0 or later · < 4.81.0 · CVE-2026-26062 · GHSA-x67p-9m2r-fxqv
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.82.0 or later · < 4.82.0 · CVE-2026-24899 · GHSA-ffg9-j72f-j6xm
Go github.com/fleetdm/fleet/v4 · Upgrade to 4.81.0 or later · < 4.81.0 · CVE-2026-23998 · GHSA-2rc4-7jc6-qffh
Maven com.amazon.redshift:redshift-jdbc42 · Upgrade to 2.2.2 or later · < 2.2.2 · CVE-2026-8178 · GHSA-wmmv-vvg5-993q
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.