Vendor/product archive

nodered / node-red CVEs

Beta · best-effort

3 CVEs tagged to nodered / node-red — 0 Critical, 1 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to nodered vendor archive

CVE-2021-21298

Published Feb 26, 2021

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the P…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2021-21297

Published Feb 26, 2021

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A ba…

CVSS 7.7 · High

Vendor/product tagsBeta · best-effort

CVE-2019-15607

Published Jan 28, 2020

A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacke…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1