PT-2026-67768

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Flowise contains a Server-Side Request Forgery SSRF flaw in its HTTP security module httpSecurity.ts. The isDeniedIP function fails to normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0.0.1 or...