FlowiseAI flowise-components

• CVE-2026-69251 Critical 9.0 Flowise RCE via TypeORM DataSource 2.7%
• CVE-2026-41274 Critical 9.3 Flowise: Cypher Injection in GraphCypherQAChain 0.5%
• CVE-2026-41271 High 7.1 Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains 0.2%
• CVE-2026-41272 High 7.1 Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) 0.3%
• CVE-2026-41270 High 7.1 Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox 0.2%
• CVE-2026-41137 Critical 9.4 Flowise: Code Injection in CSVAgent leads to Authenticated RCE 1.5%
• CVE-2026-40933 Critical 10.0 Flowise: Authenticated RCE Via MCP Adapters 12.0%