Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

nodered CVEs

Beta · best-effort

6 CVEs tagged to vendor nodered — 0 Critical, 2 High, 2 Medium, 2 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2022-3783

Published Oct 31, 2022

A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-compo…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2021-21298

Published Feb 26, 2021

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the P…

CVSS 3.5 · Low
Vendor/product tagsBeta · best-effort

CVE-2021-21297

Published Feb 26, 2021

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A ba…

CVSS 7.7 · High
Vendor/product tagsBeta · best-effort

CVE-2019-15607

Published Jan 28, 2020

A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacke…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2019-10756

Published Oct 8, 2019

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-6 of 6 CVEsPage 1 of 1