https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 19:36:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03236 bdu:2026-03236 https://cve.radiocsirt.org/vuln/bdu:2026-03236 https://cve.radiocsirt.org/vuln/euvd-2026-253273 EUVD-2026-253273 https://cve.radiocsirt.org/vuln/euvd-2026-253273 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59527 <p>Flowise is a drag &amp; drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.</p> <p>Flowise is a drag &amp; drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side Request Forgery (SSRF) vulnerability was discovered in the /api/v1/fetch-links endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. This issue has been patched in version 3.0.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-59527 https://cve.radiocsirt.org/vuln/ghsa-hr92-4q35-4j3m <p><strong>Affected:</strong> npm: flowise</p> <p>### Summary ---</p> <p>A Server-Side Request Forgery (SSRF) vulnerability was discovered in the `/api/v1/fetch-links` endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. The impact includes the potential exposure of sensitive internal administrative endpoints.</p> <p>### Details ---</p> <p>#### Vulnerability Overview</p> <p>The `fetch-links` feature in Flowise is designed to extract links from external websites or XML sitemaps. It performs an HTTP request from the server to the user-supplied URL and parses the response (HTML or XML) to extract and return links.</p> <p>The issue arises because the feature performs these HTTP requests **without validating the user-supplied URL**. In particular, when the `relativeLinksMethod` parameter is set to `webCrawl` or `xmlScrape`, the server directly calls the `fetch()` function with the provided URL, making it vulnerable to SSRF attacks.</p> <p>#### Root Cause</p> <p>The `fetch()` function is called without URL validation or restriction, which enables attackers to redirect the server to internal services.</p> <p>### Taint Flow</p> <p>#### • Taint 01: Route Registration</p> <p>https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/controllers/fetch-links/index.ts#L6-L24</p> <p>#### • Taint 02: Service</p> <p>https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/services/fetch-l…</p> <p><strong>Affected:</strong> npm: flowise</p> <p>### Summary ---</p> <p>A Server-Side Request Forgery (SSRF) vulnerability was discovered in the `/api/v1/fetch-links` endpoint of the Flowise application. This vulnerability allows an attacker to use the Flowise server as a proxy to access internal network web services and explore their link structures. The impact includes the potential exposure of sensitive internal administrative endpoints.</p> <p>### Details ---</p> <p>#### Vulnerability Overview</p> <p>The `fetch-links` feature in Flowise is designed to extract links from external websites or XML sitemaps. It performs an HTTP request from the server to the user-supplied URL and parses the response (HTML or XML) to extract and return links.</p> <p>The issue arises because the feature performs these HTTP requests **without validating the user-supplied URL**. In particular, when the `relativeLinksMethod` parameter is set to `webCrawl` or `xmlScrape`, the server directly calls the `fetch()` function with the provided URL, making it vulnerable to SSRF attacks.</p> <p>#### Root Cause</p> <p>The `fetch()` function is called without URL validation or restriction, which enables attackers to redirect the server to internal services.</p> <p>### Taint Flow</p> <p>#### • Taint 01: Route Registration</p> <p>https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/controllers/fetch-links/index.ts#L6-L24</p> <p>#### • Taint 02: Service</p> <p>https://github.com/FlowiseAI/Flowise/blob/5930f1119c655bcf8d2200ae827a1f5b9fec81d0/packages/server/src/services/fetch-l…</p> https://cve.radiocsirt.org/vuln/ghsa-hr92-4q35-4j3m https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2105 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Informationen offenzulegen und beliebigen Code auszuführen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Flowise ausnutzen, um Informationen offenzulegen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2105