FlowiseAI/Flowise

[BUG] Request for confirmation of security reports.

Opened this issue · 3 comments

I reported four security issues through the Private Vulnerability Reporting (PVR), but I have not received a response yet.
Could you please check the reports?

You can check the reports using the following links:

https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xc96-r4g6-76gf
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hv5w-qqvm-8hf7
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-c46v-5vvx-9qxv
https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-594m-pqg6-f2gc

Thank you.

hmmm, links give 404 errors :-/ maybe they are not public.

hmmm, links give 404 errors :-/ maybe they are not public.

I think only the owner of FlowiseAI and the bug reporter can access this report, and that might be why.

we received them, and are working on to fix the issues!