Function-Constructor

Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528) new EPSS 87%CVE-2025-59528webCRITICAL 10Patched2026-07-06