How to Close the Flowise CSV Agent Prompt Injection Hole Today

Flowise patched a CSV Agent prompt injection flaw, CVE-2026-70477, in version 3.1.3 — here's the exact fix sequence.