CVE-2021-21298
1 advisory.
npm/@node-red/runtime CVE-2021-21298: low, EPSS 1.08%
Path traversal in Node-Red
Action: Upgrade @node-red/runtime to 1.2.8 or later.
npm i @node-red/runtime@1.2.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.8 | - |
Fixed versions
| 1.2.8 |
Sources
- osv: GHSA-m33v-338h-4v9f
- https://github.com/node-red/node-red/security/advisories/GHSA-m33v-338h-4v9f
- https://nvd.nist.gov/vuln/detail/CVE-2021-21298
- https://github.com/node-red/node-red/commit/74db3e17d075f23d9c95d7871586cf461524c456
- https://github.com/node-red/node-red/releases/tag/1.2.8
- https://www.npmjs.com/package/@node-red/runtime
CVE-2021-21298 · published · modified · JSON