Flowise releases

[email protected] Security relevant · 1mo

Security fixes

• Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse
• Credential data leak vulnerability
• Multiple mass assignment vulnerabilities across Tools, Variables, Chatflow, Assistant, Dataset, and Custom Template endpoints

Notable features

• Pipedream MCP integration
• Browserless MCP integration
• Email change confirmation flow

View release on GitHub

[email protected] Breaking risk · 2mo

Notable features

• AgentFlow Rich Text editor for content editing
• AgentFlow support for additional load methods
• AgentFlow API client deduplication

View release on GitHub

[email protected] Breaking risk · 2mo

Breaking changes

• HTTP security checks enabled by default — blocks localhost, 127.0.0.1, and internal addresses unless configured via HTTP_SECURITY_CHECK=false or HTTP_DENY_LIST

Security fixes

• Default HTTP deny list for SSRF mitigation
• Path traversal protections
• HTTPS enforcement for user-provided URLs

Notable features

• Azure Blob Storage support
• AWS STS AssumeRole support
• AgentFlow SDK (@flowiseai/agentflow v0.0.0-dev.2)

View release on GitHub

[email protected] Breaking risk · 4mo

Security fixes

• Mass assignment prevention in registration
• DNS rebinding/TOCTOU vulnerability mitigation

Notable features

• Azure Rerankers support
• ChatCerebras v3.0 enhancement
• Ollama Cloud integration

View release on GitHub

[email protected] Mixed · 6mo

Notable features

• Image upload support for ChatOpenRouter
• Structured JSON output support for Agent Node
• Gemini Code Interpreter integration

View release on GitHub

[email protected] Breaking risk · 6mo

Breaking changes

• Read/Write File Tools permanently removed — use Google Drive or Google Docs tools as alternatives

Security fixes

• File path validation and traversal protections enhanced

View release on GitHub

[email protected] Mixed · 6mo

Security fixes

• Sensitive field sanitization in logger
• Path traversal validation on chatId

Notable features

• Teradata VectorStore support in DocumentStore
• Fuzzy node search with ranking and matching
• Northflank deployment option support

View release on GitHub

[email protected] Mixed · 7mo

Security fixes

• MCP security configuration validation

Notable features

• Gemini Built-In Tools support
• Teradata MCP server integration
• OpenAPI Toolkit URL loading and selection

View release on GitHub

[email protected] New feature · 8mo

Adds GPT-5-chat-latest and GPT-4.1-mini support to Azure OpenAI Node.

View release on GitHub

[email protected] Mixed · 8mo

Adds new provider integrations including SambaNova and AWS services, with security improvements and bug fixes.

View release on GitHub

[email protected] Mixed · 9mo

Notable features

• Grok 4 image support
• MCP toolkit caching for performance
• AWS SNS tool for message publishing

View release on GitHub

[email protected] New feature · 10mo

Adds new pagination feature in core platform.

View release on GitHub

[email protected] Mixed · 11mo

Notable features

• Workspace user role assignment and change functionality
• PWA (Progressive Web App) functionality support

View release on GitHub

[email protected] Mixed · 11mo

Adds email and collaboration tool integrations including Teams, Gmail, Outlook, and Google Docs.

View release on GitHub