Nodered Node-red-dashboard — known CVE vulnerabilities

Every CVE whose affected-product data names Nodered Node-red-dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-3223 — CVSS 7.5 (high): Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
• CVE-2019-10756 — CVSS 5.4 (medium): It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting…
• CVE-2022-3783 — CVSS 3.5 (low): A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of…