Flowise archived: six September advisories will never get an official fix

Flowise has been sunset: the repository was archived on 13 August 2026 and six security advisories published on 10 September affect every version up to and including 3.1.4. No patched version exists — 3.1.4 is the final release on npm and Docker Hub. Two critical flaws affect Enterprise SSO, four high-severity issues involve missing authorization across workspaces.

• Flowise repository archived on 13 August 2026; core team left GitHub and Discord on 31 August
• Six advisories published 10 September affect all versions up to and including 3.1.4
• Two critical SSO flaws allow session takeover via email matching in Enterprise
• Four high-severity issues expose credentials, chat history and BullMQ dashboard across tenants