Skip to content

Add Flowise NVD reference#8584

Draft
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8584from
cookesan:flowise-71332-nvd-reference
Draft

Add Flowise NVD reference#8584
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8584from
cookesan:flowise-71332-nvd-reference

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Adds Flowise 2.2.8 release, npm package, and NVD references for CVE-2025-71332 to GHSA-9c4c-g95m-c8cp.

Audit refresh, July 8, 2026:

  • Confirmed GHSA-9c4c-g95m-c8cp maps to CVE-2025-71332, and the NVD detail page has a record for CVE-2025-71332.
  • Confirmed flowise@2.2.8 exists in the npm registry and the upstream flowise@2.2.8 release tag resolves.
  • Local checks passed: one advisory JSON file changed in the PR diff, JSON parses, git diff --check passes, and the worktree is clean.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8584 July 7, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant