VendorsNoderednode-red-dashboardany version
Vulnerabilities

Nodered Node-red-dashboard any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2021-3223
Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
Published 2021-01-26 · Modified
7.5EPSS 0.185
CVE-2022-3783
node-red-dashboard ui_text Format ui-component-ctrl.js cross site scripting
Published 2022-10-31 · Modified
6.1EPSS 0.006
CVE-2019-10756
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
Published 2019-10-08 · Modified
5.4EPSS 0.006