Evidence · DiggingBeagle record
Flowise GHSA-7pc2-8w3w-pqfg LocalFileStore and Mammoth claim
Unreviewed advisory alleging a conditional Flowise builtin dependency sandbox escape; independent fix and victim status remain open.
- Source role
- secondary reporting
Evidence record
Unreviewed advisory alleging a conditional Flowise builtin dependency sandbox escape; independent fix and victim status remain open.
Claim-level citations (1)
- supportsFlowise advisory alleges a custom-function sandbox escape through Mammoth: An unreviewed advisory for Flowise through 3.1.4 reports a route from attacker-controlled LocalFileStore content to built-in Mammoth dependency execution when ALLOW_BUILTIN_DEP is enabled.
GHSA-7pc2-8w3w-pqfg, advisory description and configuration preconditions