Chore/Opus 4.5 (#5520)
* add gemini flash * add gemin flash to vertex * add gemin-1.5-flash-preview to vertex * add azure gpt 4o * add claude 3.5 sonnet * add mistral nemo * add groq llama3.1 * add gpt4o-mini to azure * o1 mini * add groq llama 3.2 * update anthropic models * add 3.5 haiku * update vertex embedding models * add azure o1 models * add o3 mini * add wolframalpha tool * Update pnpm-lock.yaml * add claude sonnet 3.7 to vertex and bedrock * Update pnpm-lock.yaml * update gemini * Update pnpm-lock.yaml * add opus 4.5 * Update CONTRIBUTING-ZH.md * Update compose.yaml
This commit is contained in:
Henry Heng
GitHub
parent
3ad2b3a559
commit
7cc2c13694
42
SECURITY.md
42
SECURITY.md
|
|
@ -4,35 +4,35 @@ At Flowise, we prioritize security and continuously work to safeguard our system
|
||||||
|
|
||||||
### Out of scope vulnerabilities
|
### Out of scope vulnerabilities
|
||||||
|
|
||||||
- Clickjacking on pages without sensitive actions
|
- Clickjacking on pages without sensitive actions
|
||||||
- CSRF on unauthenticated/logout/login pages
|
- CSRF on unauthenticated/logout/login pages
|
||||||
- Attacks requiring MITM (Man-in-the-Middle) or physical device access
|
- Attacks requiring MITM (Man-in-the-Middle) or physical device access
|
||||||
- Social engineering attacks
|
- Social engineering attacks
|
||||||
- Activities that cause service disruption (DoS)
|
- Activities that cause service disruption (DoS)
|
||||||
- Content spoofing and text injection without a valid attack vector
|
- Content spoofing and text injection without a valid attack vector
|
||||||
- Email spoofing
|
- Email spoofing
|
||||||
- Absence of DNSSEC, CAA, CSP headers
|
- Absence of DNSSEC, CAA, CSP headers
|
||||||
- Missing Secure or HTTP-only flag on non-sensitive cookies
|
- Missing Secure or HTTP-only flag on non-sensitive cookies
|
||||||
- Deadlinks
|
- Deadlinks
|
||||||
- User enumeration
|
- User enumeration
|
||||||
|
|
||||||
### Reporting Guidelines
|
### Reporting Guidelines
|
||||||
|
|
||||||
- Submit your findings to https://github.com/FlowiseAI/Flowise/security
|
- Submit your findings to https://github.com/FlowiseAI/Flowise/security
|
||||||
- Provide clear details to help us reproduce and fix the issue quickly.
|
- Provide clear details to help us reproduce and fix the issue quickly.
|
||||||
|
|
||||||
### Disclosure Guidelines
|
### Disclosure Guidelines
|
||||||
|
|
||||||
- Do not publicly disclose vulnerabilities until we have assessed, resolved, and notified affected users.
|
- Do not publicly disclose vulnerabilities until we have assessed, resolved, and notified affected users.
|
||||||
- If you plan to present your research (e.g., at a conference or in a blog), share a draft with us at least **30 days in advance** for review.
|
- If you plan to present your research (e.g., at a conference or in a blog), share a draft with us at least **30 days in advance** for review.
|
||||||
- Avoid including:
|
- Avoid including:
|
||||||
- Data from any Flowise customer projects
|
- Data from any Flowise customer projects
|
||||||
- Flowise user/customer information
|
- Flowise user/customer information
|
||||||
- Details about Flowise employees, contractors, or partners
|
- Details about Flowise employees, contractors, or partners
|
||||||
|
|
||||||
### Response to Reports
|
### Response to Reports
|
||||||
|
|
||||||
- We will acknowledge your report within **5 business days** and provide an estimated resolution timeline.
|
- We will acknowledge your report within **5 business days** and provide an estimated resolution timeline.
|
||||||
- Your report will be kept **confidential**, and your details will not be shared without your consent.
|
- Your report will be kept **confidential**, and your details will not be shared without your consent.
|
||||||
|
|
||||||
We appreciate your efforts in helping us maintain a secure platform and look forward to working together to resolve any issues responsibly.
|
We appreciate your efforts in helping us maintain a secure platform and look forward to working together to resolve any issues responsibly.
|
||||||
|
|
|
||||||
|
|
@ -3,6 +3,13 @@
|
||||||
{
|
{
|
||||||
"name": "awsChatBedrock",
|
"name": "awsChatBedrock",
|
||||||
"models": [
|
"models": [
|
||||||
|
{
|
||||||
|
"label": "anthropic.claude-opus-4-5-20251101-v1:0",
|
||||||
|
"name": "anthropic.claude-opus-4-5-20251101-v1:0",
|
||||||
|
"description": "Claude 4.5 Opus",
|
||||||
|
"input_cost": 0.000005,
|
||||||
|
"output_cost": 0.000025
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"label": "anthropic.claude-sonnet-4-5-20250929-v1:0",
|
"label": "anthropic.claude-sonnet-4-5-20250929-v1:0",
|
||||||
"name": "anthropic.claude-sonnet-4-5-20250929-v1:0",
|
"name": "anthropic.claude-sonnet-4-5-20250929-v1:0",
|
||||||
|
|
@ -505,6 +512,13 @@
|
||||||
{
|
{
|
||||||
"name": "chatAnthropic",
|
"name": "chatAnthropic",
|
||||||
"models": [
|
"models": [
|
||||||
|
{
|
||||||
|
"label": "claude-opus-4-5",
|
||||||
|
"name": "claude-opus-4-5",
|
||||||
|
"description": "Claude 4.5 Opus",
|
||||||
|
"input_cost": 0.000005,
|
||||||
|
"output_cost": 0.000025
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"label": "claude-sonnet-4-5",
|
"label": "claude-sonnet-4-5",
|
||||||
"name": "claude-sonnet-4-5",
|
"name": "claude-sonnet-4-5",
|
||||||
|
|
@ -769,6 +783,13 @@
|
||||||
"input_cost": 1.25e-7,
|
"input_cost": 1.25e-7,
|
||||||
"output_cost": 3.75e-7
|
"output_cost": 3.75e-7
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"label": "claude-opus-4-5@20251101",
|
||||||
|
"name": "claude-opus-4-5@20251101",
|
||||||
|
"description": "Claude 4.5 Opus",
|
||||||
|
"input_cost": 0.000005,
|
||||||
|
"output_cost": 0.000025
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"label": "claude-sonnet-4-5@20250929",
|
"label": "claude-sonnet-4-5@20250929",
|
||||||
"name": "claude-sonnet-4-5@20250929",
|
"name": "claude-sonnet-4-5@20250929",
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue