Skip to content

Flowise

[email protected] scope: flowise Security

This release patches 1 CVE for security teams tracking exposure across their dependency inventory.

Published 1mo AI Agents & Assistants
1 patched CVE
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE CVE-2025-31125 EPSS 59%
1 CVEs patched

Topics

agentic-ai agentic-workflow agents artificial-intelligence llm chatgpt
+10 more
javascript langchain large-language-models low-code multiagent-systems no-code openai react typescript workflow-automation

Affected surfaces

auth deps

Summary

AI summary

Broad release touches fix, agentflow, chore, and feat.

Full changelog

What's Changed

  • Fix clickjacking by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6185
  • fix(agentflow): add onFlowChange notifications for deleteNode, deleteEdge, and duplicateNode actions by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6211
  • Fix: Clean and Nuke Script by @abdullah-workday in https://github.com/FlowiseAI/Flowise/pull/6213
  • feat(agentflow): add client filtering for form input options in Start node by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6212
  • feat: turn chatflow into MCP server by @prd-hoang-doan in https://github.com/FlowiseAI/Flowise/pull/5930
  • feat(agentflow): optional cavasActions to allow additional buttons next to validate by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6224
  • chore: bump @flowiseai/agentflow to 0.0.0-dev.11 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6216
  • chore: bump @flowiseai/agentflow to 0.0.0-dev.12 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6225
  • Feat/FlowConfigDialog UI Redesign by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6229
  • feat(agentflow): make client-specific knowledge fields for agent nodes by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6226
  • Fix/agentflow Fixed theming for dark mode in agentflow by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6234
  • Bring canvas buttons to same z-index level by @VaidikFlow in https://github.com/FlowiseAI/Flowise/pull/6235
  • Fix(agentflow) - Fix z-index for validation button by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6238
  • chore: bump @flowiseai/agentflow to 0.0.0-dev.13 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6244
  • fix(mcp): guard malformed form option metadata in chatflow MCP schema generation by @shaun0927 in https://github.com/FlowiseAI/Flowise/pull/6233
  • bugfix: message panel crashes via large chat volume by @jchui-wd in https://github.com/FlowiseAI/Flowise/pull/6191
  • Bugfix/Missing Reasoning Item by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6237
  • feat(components): Add support for Anthropic Claude Opus 4.7 by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6247
  • fix(agentflow): fix variable resolution, credential sync, and add E2E example by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6245
  • fix(server): preserve custom iframe allowlists in frame headers by @shaun0927 in https://github.com/FlowiseAI/Flowise/pull/6232
  • fix(mcp): preserve tool input schema types and required fields by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6248
  • Refactoring Validation logic into separate function by @abdullah-workday in https://github.com/FlowiseAI/Flowise/pull/6272
  • feat(observe): add initial package structure and configuration for @flowiseai/observe by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6270
  • docs: fix broken environment variable docs links in markdown files by @SyncWithRaj in https://github.com/FlowiseAI/Flowise/pull/6255
  • feat: implement the custom MCP Server in tool by @prd-hoang-doan in https://github.com/FlowiseAI/Flowise/pull/6205
  • Chore update Node.js version to 20.20.2 in CI workflows by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6277
  • Chore/pin axios to 1.15.0 by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6282
  • chore: update agentflow workflow and add changelog by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6284
  • Fix FLOWISE-319 Sanitize User by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6269
  • feat: add GPT-5.5 and GPT-5.5 Pro to OpenAI chat models by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6278
  • chore: update Node.js version consistency and optimize Docker build by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6285
  • Fix/agentflow Fixing agentflow UI style and make it similar to v2 by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6280
  • bug: Block read_pickle and class definitions, restrict custom CSV field to read_csv() only by @chloebyun-wd in https://github.com/FlowiseAI/Flowise/pull/6257
  • docs/ui: fix typos in user-facing copy by @tiancizhou in https://github.com/FlowiseAI/Flowise/pull/6303
  • Chore/update mcp sdk version, update slack, github, brave mcp by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6293
  • Chore/Remove Deprecated Parameters For Opus 4.7 by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6294
  • update: eval base url by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/5738
  • fix: flowise-146 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6170
  • Fix FLOWISE 566 OAuth2 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6276
  • add langsmith tracing initialized from environment variables by @mmattu-wd in https://github.com/FlowiseAI/Flowise/pull/6271
  • feature: custom endpoint host for AWS Embedding Node by @rohan-patil2 in https://github.com/FlowiseAI/Flowise/pull/6264
  • Fix FLOWISE 429 executeJavaScriptCode by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6306
  • feat(agentflow): add node execution visualization with HITL support by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6312
  • feat(observe): NodeExecutionDetail component by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6310
  • Update logger to Remove Sensitive Fields by @christopherholland-workday in https://github.com/FlowiseAI/Flowise/pull/6317
  • fix: randomSeed always ignored in ChatMistral node by @PythonToGo in https://github.com/FlowiseAI/Flowise/pull/6299
  • feat(components): add missing languages to Code Text Splitter by @deepak0x in https://github.com/FlowiseAI/Flowise/pull/6290
  • fix: FLOWISE-599 Adding Shahdow and elevation to dropdown list by @abdullah-workday in https://github.com/FlowiseAI/Flowise/pull/6322
  • Fix(agentflow) - Add iteration node full functionality by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6324
  • feat: implement scheduling functionality for AgentflowV2 by @prd-hoang-doan in https://github.com/FlowiseAI/Flowise/pull/5971
  • fix: cors handling by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6304
  • chore: bump @flowiseai/agentflow to 0.0.0-dev.14 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6337
  • feat(observe): ExecutionDetail with tree view, headers, and resizable drawer by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6325
  • Fix/agentflow add pending test cases for loop node by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6338
  • feat/show scheduled flow status by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6330
  • Reusable publish workflow + @flowiseai/observe publish pipeline by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6341
  • fix: strictly allow only read_csv(data, litera_options) and block exeutable args by @chloebyun-wd in https://github.com/FlowiseAI/Flowise/pull/6313
  • chore: update CHANGELOG for agentflow 0.0.0-dev.14 and adjust package version in @flowiseai/observe by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6346
  • feat: remove scoped view option from ExecutionsListTable by @jocelynlin-wd in https://github.com/FlowiseAI/Flowise/pull/6348
  • chore: bump @flowiseai/observe to 0.0.0-dev.1 by @github-actions[bot] in https://github.com/FlowiseAI/Flowise/pull/6349
  • feat:344 | ambient agents webhooks by @jchui-wd in https://github.com/FlowiseAI/Flowise/pull/6283
  • feature/extend AWS Bedrock node with full model catalog and custom model support by @Ankit5467 in https://github.com/FlowiseAI/Flowise/pull/6309
  • Feat(agentflow) Node version detection and version upgrade support by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6347
  • feat - Add changesets for agentflow and observe packages by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6350
  • Chore/fix pnpm lock file by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6357
  • bugfix:308 | remove ungated overrideConfig spread by @jchui-wd in https://github.com/FlowiseAI/Flowise/pull/6279
  • fix: flowise-186 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6158
  • fix: flowise-310 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6321
  • Fix (Agentflow) Remove changeset:publish from dependency by @j-sanaa in https://github.com/FlowiseAI/Flowise/pull/6356
  • Chore/vm2 update by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6363
  • Reject webhook/schedule flows on prediction API and surface trigger-specific code samples by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6361
  • fix: flowise-318 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6335
  • fix(models): correct chatMistralAI and chatCohere pricing by 1000x by @AbdulSamad94 in https://github.com/FlowiseAI/Flowise/pull/6393
  • fix: access to invited workspace by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6360
  • Fix FLOWISE 453 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6431
  • Fix FLOWISE 596 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6435
  • Fix FLOWISE-597 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6445
  • Fix FLOWISE-703 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6446
  • chore: node version update by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6359
  • fix: [OPS-3030] Push development images to ECR by @natan-hoppe-workday in https://github.com/FlowiseAI/Flowise/pull/6391
  • Fix Flowise 552 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6471
  • Fix Flowise 591 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6476
  • Fix Flowise 606 by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6499
  • fix: flowise 370 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6409
  • fix: FLOWISE-400, 543, 551 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6417
  • fix: FLOWISE-553, 598, 616 by @0xi4o in https://github.com/FlowiseAI/Flowise/pull/6464
  • Bugfix/add getSafeFilePath utility for secure file path resolution by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6549
  • Fix Docker Node Version Build Deps by @yau-wd in https://github.com/FlowiseAI/Flowise/pull/6548
  • Release/3.1.3 by @HenryHengZJ in https://github.com/FlowiseAI/Flowise/pull/6566

New Contributors

  • @abdullah-workday made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6213
  • @VaidikFlow made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6235
  • @shaun0927 made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6233
  • @SyncWithRaj made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6255
  • @chloebyun-wd made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6257
  • @tiancizhou made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6303
  • @PythonToGo made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6299
  • @deepak0x made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6290
  • @Ankit5467 made their first contribution in https://github.com/FlowiseAI/Flowise/pull/6309

Full Changelog: https://github.com/FlowiseAI/Flowise/compare/[email protected]@3.1.3

Security Fixes

  • Fix clickjacking
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Flowise

Get notified when new releases ship.

Sign up free

About Flowise

Build AI Agents, Visually

All releases →

Related context

Beta — feedback welcome: [email protected]