CVE-2019-10756

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the uinotification node accepting raw HTML by default...

PT-2019-12030

Name of the Vulnerable Software and Affected Versions node-red-dashboard versions prior to 2.17.0 Description The issue allows for JavaScript injection due to the ui notification node accepting raw HTML by default. Recommendations For node-red-dashboard versions prior to 2.17.0, update to version...