Detections
Analytics

SCA: security update for flowise, flowise-components (GHSA-88pr-878c-24wf)

high Tenable Cloud Security Plugin ID 445620

Description

Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

Solution

Update the flowise library and its related packages to version 3.1.3 or later.

See Also

https://github.com/advisories/GHSA-88pr-878c-24wf

Plugin Details

Severity: High

ID: 445620

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 8/4/2026

Updated: 8/4/2026

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/4/2026

Vulnerability Publication Date: 8/4/2026

Reference Information