Vulnerabilities > Nodered
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-10-31 | CVE-2022-3783 | Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard A vulnerability, which was classified as problematic, has been found in node-red-dashboard. | 6.1 |
| 2021-02-26 | CVE-2021-21298 | Path Traversal vulnerability in Nodered Node-Red Node-Red is a low-code programming for event-driven applications built using nodejs. | 6.5 |
| 2021-02-26 | CVE-2021-21297 | Unspecified vulnerability in Nodered Node-Red Node-Red is a low-code programming for event-driven applications built using nodejs. | 6.5 |
| 2021-01-26 | CVE-2021-3223 | Path Traversal vulnerability in Nodered Node-Red-Dashboard Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. | 5.0 |
| 2020-01-28 | CVE-2019-15607 | Cross-site Scripting vulnerability in Nodered Node-Red A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. | 3.5 |
| 2019-10-08 | CVE-2019-10756 | Cross-site Scripting vulnerability in Nodered Node-Red-Dashboard It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default. | 3.5 |