Remote Code Execution via Custom JS Function in Flowise

During a security review of Flowise v3.1.1, I identified a path that allows authenticated users capable of creating chatflows to achieve… Continue reading on Medium »