Missing Authorization

Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authorization via the generateTextToSpeech process. An attacker can abuse stored API credentials to generate unlimited text-to-speech audio and incur financial costs on the account owner by sending...