{"data":{"id":"7e7b6962-c0dc-4015-b091-42c85f2c6c50","title":"GHSA-xhmj-rg95-44hv: Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox","summary":"The Flowise Custom Function feature applies SSRF protection only to the axios and node-fetch libraries through the HTTP_DENY_LIST setting. The built-in http, https and net modules are passed to the NodeVM sandbox without that protection, so an authenticated user can import them directly and reach internal resources such as cloud metadata services. The advisory includes a proof of concept that retrieves IAM role credentials from the AWS EC2 metadata endpoint at 169.254.169.254.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-xhmj-rg95-44hv","publishedAt":"2026-04-16T21:50:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flowise-components@<= 3.0.13 (fixed: 3.1.0)","flowise@<= 3.0.13 (fixed: 3.1.0)"],"affectedPackageNames":["flowise-components","flowise"],"affectedPackageRefs":["npm:flowise","npm:flowise-components"],"affectedVendors":[],"affectedVendorsRaw":["Flowise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-xhmj-rg95-44hv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-16T21:50:12.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}