High, CVSS 8.3
Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70473 · GHSA-fr6g-7cq8-fg82
Know what to patch next.
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
At a glance
- New
- 437 Actionable advisories published in the last 30 days (UTC), within the selected severities, against 533 in the 30 days before.
- Critical
- 68 Actionable advisories published in the last 30 days (UTC) and rated CVSS 9.0 or higher, within the selected severities.
Activity · last 26 weeks
- High, CVSS 7.1
Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70472 · GHSA-chm3-vqcf-52rx
- Critical, CVSS 9.4
Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69264 · GHSA-4j8x-x6v7-w9rq · amended
- High, CVSS 7.2
Flowise: Authenticated arbitrary file write in the
S3 Directorydocument loader via unsanitized S3 object keysnpm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · GHSA-88pr-878c-24wf
- High, CVSS 7.1
Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-70471 · GHSA-8r8h-6vcc-xhrv
- Critical, CVSS 9.5
Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-70470 · GHSA-52fh-8v99-63c2 · amended
- High, CVSS 8.7
Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69263 · GHSA-xc48-889x-5qmw
- High, CVSS 7.1
Flowise:
DELETE /api/v1/chatflows/:iddoes not validate resource type, allowingagentflows:deleteandchatflows:deleteto delete each other’s flow typenpm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69262 · GHSA-p5w8-m249-4r4v
- Critical, CVSS 9.4
Flowise RCE via SQLite Record Manager Node
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69259 · GHSA-x3hf-7cj6-3r4m · amended
- High, CVSS 8.8
Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated
overrideConfigSpread in Prediction APInpm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69258 · GHSA-6vh2-wg4h-4vwj
- High, CVSS 7.6
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69257 · GHSA-c6xh-wv4j-ppv5
- Critical, CVSS 9.4
Flowise: Remote Code Execution Vulnerability in CSVAgent
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69256 · GHSA-x6vm-w76m-8j7g · amended
- Critical, CVSS 9.2
Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69255 · GHSA-vmv7-4m6c-3cg5 · amended
- Critical, CVSS 9.4
Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69254 · GHSA-3769-jgqc-cxm7 · amended
- Critical, CVSS 9.0
Flowise Sandbox Escape to RCE
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69253 · GHSA-wg86-r78f-74mp · amended
- High, CVSS 7.2
Flowise: Missing authorization on
/api/v1/filesallows low-privileged API keys to list and delete files across workspaces within the same organizationnpm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69252 · GHSA-wp74-f5hh-5f3r
- Critical, CVSS 9.0
Flowise RCE via TypeORM DataSource
npm flowise +1 · Upgrade all 2 to 3.1.3 or later · <= 3.1.2 · CVE-2026-69251 · GHSA-g32j-mmxr-gfq5 · amended
- High, CVSS 8.5
Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration
npm flowise · Upgrade to 3.1.3 or later · <= 3.1.2 · CVE-2026-69250 · GHSA-r745-8hwv-h473
- High, CVSS 8.7
python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
PyPI cryptography · Upgrade to 49.0.0 or later · >= 42.0.0, < 49.0.0 · CVE-2026-69249 · GHSA-jwv3-5hgf-82ww
- High, CVSS 8.2
cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
PyPI cryptography · Upgrade to 50.0.0 or later · >= 44.0.0, < 50.0.0 · CVE-2026-69247 · GHSA-g6cj-pr64-35w5
- High, CVSS 7.2
Guzzle: Noncanonical host can bypass host-based checks
Packagist guzzlehttp/guzzle · Upgrade to 8.0.1 or 7.15.2 by release line · < 7.15.2; >= 8.0.0, < 8.0.1 · CVE-2026-69246 · GHSA-v5mv-p594-2x33 · amended
- High, CVSS 7.1
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
PyPI aiohttp · Upgrade to 3.14.3 or later · <= 3.14.2 · CVE-2026-69244 · GHSA-cq5v-8q36-5273
- Critical, CVSS 9.8
Sequelize: SQL Injection (Oracle DB)
npm sequelize · Upgrade to 6.37.4 or later · < 6.37.4 · CVE-2026-69240 · GHSA-v8fg-2rw7-q452 · amended
- High, CVSS 8.1
GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read
PyPI gitpython · Upgrade to 3.1.57 or later · <= 3.1.56 · GHSA-3f7w-8rr8-f37f
- High, CVSS 7.7
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
npm ip-address · Upgrade to 10.3.1 or later · <= 10.3.0 · CVE-2026-69192 · GHSA-mwp4-54f8-5fhr
A vendor fix does not resolve your finding until you verify it in your own systems.
News
Security reports that are not matched to your stack.
CISA security events · all vendors
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
- NewsExploited · CISA KEV
Advisory watch · no fix evidence
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
- NewsUnratednpm
Listed as news: the source report lacks affected versions, a fix, or verified evidence.