Skip to content

Chore/Disable Available Dep By Default#5231

Merged
HenryHengZJ merged 1 commit intomainfrom
chore/Allow-Built-In-Dep
Sep 18, 2025
Merged

Chore/Disable Available Dep By Default#5231
HenryHengZJ merged 1 commit intomainfrom
chore/Allow-Built-In-Dep

Conversation

@HenryHengZJ
Copy link
Copy Markdown
Contributor

Disable available dependencies by default, only allow when ALLOW_BUILTIN_DEP is set to true

@HenryHengZJ HenryHengZJ merged commit 42152dd into main Sep 18, 2025
2 checks passed
@toi500
Copy link
Copy Markdown
Contributor

toi500 commented Sep 18, 2025

@HenryHengZJ Isn't this a breaking change? Several apps I had with custom function nodes suddenly broke. I just got lucky and saw this PR by chance.

image

@HenryHengZJ
Copy link
Copy Markdown
Contributor Author

There are multiple securities vulnerabilities that causes remote code execution have been reported and published widely. Unfortunately we have to perform the strick check by default. You can turn that off via the env variable

@HenryHengZJ
Copy link
Copy Markdown
Contributor Author

Added fix to allow node-fetch and axios by default: #5264

erhhung pushed a commit to erhhung/flowise that referenced this pull request Oct 5, 2025
disable available dependencies by default, only allow when ALLOW_BUILTIN_DEP is set to true
erhhung pushed a commit to erhhung/flowise that referenced this pull request Jan 23, 2026
disable available dependencies by default, only allow when ALLOW_BUILTIN_DEP is set to true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants