Vulnerability Database

296,278

Total vulnerabilities in the database

CVE-2025-29189

Flowise <= 2.2.3 is vulnerable to SQL Injection. via tableName parameter at Postgres_VectorStores.

Published: Apr 9, 2025
Updated: Aug 11, 2025
CVE: CVE-2025-29189
GHSA: GHSA-gjx9-wg9x-7gvp
Severity: High
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
flowiseai / flowise	-	2.2.3.x
flowise-components	-	2.2.4