Skip to content
AI Sec Watch
HighVulnerability

GHSA-2x8m-83vc-6wv4: Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

Source
GitHub Advisory(opens in a new tab)
Identifier
GHSA-2x8m-83vc-6wv4
Published
Record updated
View JSON
Affected
  • flowise-components <= 3.0.13
  • flowise <= 3.0.13
Fixed in
3.1.0

Summary

The secureAxiosRequest and secureFetch wrappers in Flowise's packages/components/src/httpSecurity.ts are meant to block SSRF but can be bypassed. When HTTP_DENY_LIST is unset, checkDenyList returns immediately and allows all requests, including localhost. A DNS rebinding attack exploits the gap between the dns.lookup used for validation and the second lookup the HTTP client makes, letting an attacker serve a safe IP first and an internal address such as 127.0.0.1 afterward. The source rates the confidentiality impact as High, since internal services become reachable.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

Related items