Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/17 9:34 p.m.11 views

Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs

Summary The GET /api/v1/public-chatflows/:id endpoint returns the full chatflow object without sanitization for public chatflows. Docker validation revealed this is worse than initially assessed: the sanitizeFlowDataForPublicEndpoint function does NOT exist in the released v3.0.13 Docker image...

8.7CVSS5.8AI score0.00421EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder