From 7cc2c136947c6e98869f327dc3938f9bb8657b92 Mon Sep 17 00:00:00 2001 From: Henry Heng Date: Wed, 26 Nov 2025 15:59:30 +0000 Subject: [PATCH] Chore/Opus 4.5 (#5520) * add gemini flash * add gemin flash to vertex * add gemin-1.5-flash-preview to vertex * add azure gpt 4o * add claude 3.5 sonnet * add mistral nemo * add groq llama3.1 * add gpt4o-mini to azure * o1 mini * add groq llama 3.2 * update anthropic models * add 3.5 haiku * update vertex embedding models * add azure o1 models * add o3 mini * add wolframalpha tool * Update pnpm-lock.yaml * add claude sonnet 3.7 to vertex and bedrock * Update pnpm-lock.yaml * update gemini * Update pnpm-lock.yaml * add opus 4.5 * Update CONTRIBUTING-ZH.md * Update compose.yaml --- README.md | 2 +- SECURITY.md | 58 ++++++++++++++++----------------- packages/components/models.json | 21 ++++++++++++ 3 files changed, 51 insertions(+), 30 deletions(-) diff --git a/README.md b/README.md index 1c7eb27e9..79f4f147e 100644 --- a/README.md +++ b/README.md @@ -189,7 +189,7 @@ Deploy Flowise self-hosted in your existing infrastructure, we support various [ - [Railway](https://docs.flowiseai.com/configuration/deployment/railway) [![Deploy on Railway](https://railway.app/button.svg)](https://railway.app/template/pn4G8S?referralCode=WVNPD9) - + - [Northflank](https://northflank.com/stacks/deploy-flowiseai) [![Deploy to Northflank](https://assets.northflank.com/deploy_to_northflank_smm_36700fb050.svg)](https://northflank.com/stacks/deploy-flowiseai) diff --git a/SECURITY.md b/SECURITY.md index c7d02edbc..6d8a12c2d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,38 +1,38 @@ -### Responsible Disclosure Policy +### Responsible Disclosure Policy -At Flowise, we prioritize security and continuously work to safeguard our systems. However, vulnerabilities can still exist. If you identify a security issue, please report it to us so we can address it promptly. Your cooperation helps us better protect our platform and users. +At Flowise, we prioritize security and continuously work to safeguard our systems. However, vulnerabilities can still exist. If you identify a security issue, please report it to us so we can address it promptly. Your cooperation helps us better protect our platform and users. -### Out of scope vulnerabilities +### Out of scope vulnerabilities -- Clickjacking on pages without sensitive actions -- CSRF on unauthenticated/logout/login pages -- Attacks requiring MITM (Man-in-the-Middle) or physical device access -- Social engineering attacks -- Activities that cause service disruption (DoS) -- Content spoofing and text injection without a valid attack vector -- Email spoofing -- Absence of DNSSEC, CAA, CSP headers -- Missing Secure or HTTP-only flag on non-sensitive cookies -- Deadlinks -- User enumeration +- Clickjacking on pages without sensitive actions +- CSRF on unauthenticated/logout/login pages +- Attacks requiring MITM (Man-in-the-Middle) or physical device access +- Social engineering attacks +- Activities that cause service disruption (DoS) +- Content spoofing and text injection without a valid attack vector +- Email spoofing +- Absence of DNSSEC, CAA, CSP headers +- Missing Secure or HTTP-only flag on non-sensitive cookies +- Deadlinks +- User enumeration -### Reporting Guidelines +### Reporting Guidelines -- Submit your findings to https://github.com/FlowiseAI/Flowise/security -- Provide clear details to help us reproduce and fix the issue quickly. +- Submit your findings to https://github.com/FlowiseAI/Flowise/security +- Provide clear details to help us reproduce and fix the issue quickly. -### Disclosure Guidelines +### Disclosure Guidelines -- Do not publicly disclose vulnerabilities until we have assessed, resolved, and notified affected users. -- If you plan to present your research (e.g., at a conference or in a blog), share a draft with us at least **30 days in advance** for review. -- Avoid including: - - Data from any Flowise customer projects - - Flowise user/customer information - - Details about Flowise employees, contractors, or partners +- Do not publicly disclose vulnerabilities until we have assessed, resolved, and notified affected users. +- If you plan to present your research (e.g., at a conference or in a blog), share a draft with us at least **30 days in advance** for review. +- Avoid including: + - Data from any Flowise customer projects + - Flowise user/customer information + - Details about Flowise employees, contractors, or partners -### Response to Reports +### Response to Reports -- We will acknowledge your report within **5 business days** and provide an estimated resolution timeline. -- Your report will be kept **confidential**, and your details will not be shared without your consent. - -We appreciate your efforts in helping us maintain a secure platform and look forward to working together to resolve any issues responsibly. +- We will acknowledge your report within **5 business days** and provide an estimated resolution timeline. +- Your report will be kept **confidential**, and your details will not be shared without your consent. + +We appreciate your efforts in helping us maintain a secure platform and look forward to working together to resolve any issues responsibly. diff --git a/packages/components/models.json b/packages/components/models.json index 7551c6097..b5c6c73d8 100644 --- a/packages/components/models.json +++ b/packages/components/models.json @@ -3,6 +3,13 @@ { "name": "awsChatBedrock", "models": [ + { + "label": "anthropic.claude-opus-4-5-20251101-v1:0", + "name": "anthropic.claude-opus-4-5-20251101-v1:0", + "description": "Claude 4.5 Opus", + "input_cost": 0.000005, + "output_cost": 0.000025 + }, { "label": "anthropic.claude-sonnet-4-5-20250929-v1:0", "name": "anthropic.claude-sonnet-4-5-20250929-v1:0", @@ -505,6 +512,13 @@ { "name": "chatAnthropic", "models": [ + { + "label": "claude-opus-4-5", + "name": "claude-opus-4-5", + "description": "Claude 4.5 Opus", + "input_cost": 0.000005, + "output_cost": 0.000025 + }, { "label": "claude-sonnet-4-5", "name": "claude-sonnet-4-5", @@ -769,6 +783,13 @@ "input_cost": 1.25e-7, "output_cost": 3.75e-7 }, + { + "label": "claude-opus-4-5@20251101", + "name": "claude-opus-4-5@20251101", + "description": "Claude 4.5 Opus", + "input_cost": 0.000005, + "output_cost": 0.000025 + }, { "label": "claude-sonnet-4-5@20250929", "name": "claude-sonnet-4-5@20250929",