Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/node-red-dashboard@2.17.0
purl pkg:npm/node-red-dashboard@2.17.0
Next non-vulnerable version 3.2.0
Latest non-vulnerable version 3.2.0
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-ga2b-hgm5-7ucq
Aliases:
CVE-2021-3223
GHSA-2hw7-mxvj-m455
2.26.2
Affected by 1 other vulnerability.
VCID-n6ye-4jay-bqcp
Aliases:
CVE-2022-3783
GHSA-vrv9-3x3w-ffxw
A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-component-ctrl.js of the component ui_text Format Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 9305d1a82f19b235dfad24a7d1dd4ed244db7743. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-212555.
3.2.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-5xkb-pc23-47e8 Cross-site Scripting in node-red-dashboard CVE-2019-10756
GHSA-xg59-m7wx-853q

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T18:38:18.407833+00:00 GitLab Importer Affected by VCID-n6ye-4jay-bqcp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-red-dashboard/CVE-2022-3783.yml 38.6.0
2026-06-12T17:32:24.153893+00:00 GitLab Importer Affected by VCID-ga2b-hgm5-7ucq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-red-dashboard/CVE-2021-3223.yml 38.6.0
2026-06-12T17:14:42.239841+00:00 GitLab Importer Fixing VCID-5xkb-pc23-47e8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/node-red-dashboard/CVE-2019-10756.yml 38.6.0
2026-06-12T08:10:29.301662+00:00 GithubOSV Importer Fixing VCID-5xkb-pc23-47e8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/10/GHSA-xg59-m7wx-853q/GHSA-xg59-m7wx-853q.json 38.6.0
2026-06-11T20:25:34.872246+00:00 GHSA Importer Fixing VCID-5xkb-pc23-47e8 https://github.com/advisories/GHSA-xg59-m7wx-853q 38.6.0