# Flowise 3.1.4: update needed

High or critical vulnerabilities are fixed in a newer release.

- Known vulnerabilities: 11 (3 critical, 8 high, 0 medium, 0 low)
- End of life: no
- Data as of: 2026-10-24 20:38 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2026-67622](https://flowiseai.com/sunset) | critical | no | — |
| [CVE-2026-100607](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-cffm-583c-vffr) | critical | no | — |
| [CVE-2026-100606](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-vf3j-89vf-r697) | critical | no | — |
| [CVE-2026-71962](https://flowiseai.com/sunset) | high | no | — |
| [CVE-2026-70636](https://flowiseai.com/sunset) | high | no | — |
| [CVE-2026-100608](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-rpcc-gw54-mfgx) | high | no | — |
| [CVE-2026-67620](https://flowiseai.com/sunset) | high | no | — |
| [CVE-2026-100610](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jvx3-mjpw-r4gh) | high | no | — |
| [CVE-2026-67621](https://flowiseai.com/sunset) | high | no | — |
| [CVE-2026-100609](https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-27w2-26m5-x82c) | high | no | — |

And 1 more with lower severity.

## Notes

- End-of-life data isn't available for Flowise; this verdict is based on known vulnerabilities only.
- 1 Flowise vulnerability is still under review and not included in this verdict.

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/flowise/3.1.4 · JSON: https://fixedin.dev/flowise/3.1.4.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt