Prototype Pollution in Node-Red

🗓️ 26 Feb 2021 16:05:31Reported by GitHub Advisory DatabaseType

Prototype Pollution vulnerability in Node-RED admin API patched in 1.2.

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2021-21297	26 Feb 202117:15	–	nvd
OSV	CVE-2021-21297	26 Feb 202117:15	–	osv
OSV	Prototype Pollution in Node-Red	26 Feb 202116:31	–	osv
Cvelist	CVE-2021-21297 Prototype Pollution in Node-Red	26 Feb 202116:20	–	cvelist
Veracode	Prototype Pollution	1 Mar 202109:31	–	veracode
CVE	CVE-2021-21297	26 Feb 202117:15	–	cve
Node.js	Prototype Pollution	26 Feb 202116:26	–	nodejs
Prion	Design/Logic Flaw	26 Feb 202117:15	–	prion

Vulners

Node

node-red runtimeRange<1.2.8

Source	Link
github	www.github.com/node-red/node-red/security/advisories/GHSA-xp9c-82x8-7f67
github	www.github.com/node-red/node-red/releases/tag/1.2.8
npmjs	www.npmjs.com/package/@node-red/editor-api
npmjs	www.npmjs.com/package/@node-red/runtime
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21297
github	www.github.com/advisories/GHSA-xp9c-82x8-7f67

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Feb 2021 16:31Current

1.6Low risk

Vulners AI Score1.6

CVSS24

CVSS36.5

EPSS0.001