GHSA-W7X8-Q2GP-5CGG Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...