A 10/10 Flowise bug was patched, but is now being abused in the wild.
The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...
Preview of new companion app allows developers to run multiple agent sessions in parallel across multiple repos and iterate ...
Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...