node-red-dashboard (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package node-red-dashboard, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2021-3223 — CVSS 7.5 (high): Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
• CVE-2019-10756 — CVSS 5.4 (medium): It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting…
• CVE-2022-3783 — CVSS 3.5 (low): A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of…