Skip to content

Flowise

AI Agents & Assistants

A visual, open‑source platform for building and orchestrating AI agents

Track releases GitHub Website
TypeScript Latest [email protected] · 1mo ago Security brief →

Features

  • Visual workflow builder for designing AI agent flows
  • Docker‑based deployment with Docker Compose and standalone images
  • Self‑hosting support across major cloud providers (AWS, Azure, GCP, etc.)
  • Extensible node components for integrating third‑party services

Security Response History

1 CVE
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2025-31125 KEV medium
CVSS 5.3
 2025-03-31 2025-06-12 2mo / median 9mo

Recent releases

View all 15 releases →
Review required
[email protected] Security relevant
Auth Dependencies

Clickjacking fix + Agentflow enhancements + Observe

patches CVE-2025-31125
Open
[email protected] Security relevant
Security fixes
  • Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse
  • Credential data leak vulnerability
  • Multiple mass assignment vulnerabilities across Tools, Variables, Chatflow, Assistant, Dataset, and Custom Template endpoints
Notable features
  • Pipedream MCP integration
  • Browserless MCP integration
  • Email change confirmation flow
View release on GitHub
[email protected] Breaking risk
Breaking changes
  • HTTP security checks enabled by default — blocks localhost, 127.0.0.1, and internal addresses unless configured via HTTP_SECURITY_CHECK=false or HTTP_DENY_LIST
Security fixes
  • Default HTTP deny list for SSRF mitigation
  • Path traversal protections
  • HTTPS enforcement for user-provided URLs
Notable features
  • Azure Blob Storage support
  • AWS STS AssumeRole support
  • AgentFlow SDK (@flowiseai/agentflow v0.0.0-dev.2)
View release on GitHub
[email protected] Breaking risk
Security fixes
  • Mass assignment prevention in registration
  • DNS rebinding/TOCTOU vulnerability mitigation
Notable features
  • Azure Rerankers support
  • ChatCerebras v3.0 enhancement
  • Ollama Cloud integration
View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
54,741
Forks
24,733
Languages
TypeScript JavaScript HTML
Downloads/week
15 ↑105%
NPM Maintainers
1
Contributors
100
TypeScript
Types included ✓
View on GitHub View on npm Homepage Documentation

Install & Platforms

Install via
npm docker docker-compose

Community & Support

Discord

Similar tools

harness-sdk
jean
Agent-fox
Goose
beeai-framework

Beta — feedback welcome: [email protected]