Skip to content
OpenAdvisories

Package · npm

node-red-dashboard

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2019-10756

    Cross-site Scripting in node-red-dashboard

    It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

    node-red-dashboard npm