FlowiseAI Flowise 1.8.2
Approved changes feed: RSS · Atom
cpe:2.3:a:flowiseai:flowise:1.8.2:*:*:*:*:*:*:*
part: a version: 1.8.2 update: *
| Vendor | Flowiseai (34159358-391f-51fd-99d0-7e34c15b43d0) |
|---|---|
| Product | Flowise (b6ac3053-c07a-5a77-b410-954bd97b3dbc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/flowiseai/flowise |
purl2cpe | 2026-06-01 10:15:56.750499 |
pkg:npm/flowise |
purl2cpe | 2026-06-01 10:15:56.750501 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8182 |
vulnerable | 2026-06-08 07:00:22.957037 |
Flowise Denial of Service
HIGH (7.5)
An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint.
Published: 2024-08-27T13:09:02.433Z
Updated: 2024-08-27T13:53:23.463Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8181 |
vulnerable | 2026-06-08 07:00:22.955518 |
Flowise Authentication Bypass
CRITICAL (9.8)
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Published: 2024-08-27T13:10:40.880Z
Updated: 2024-09-06T14:27:44.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.