← All advisories

High severity7.5NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2021-3223

CVE-2021-3223

Description

Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
node-red-dashboardnpm	< 2.26.2	2.26.2

Affected products

3

Node-RED-Dashboard/Node-RED-Dashboarddescription
ghsa-coords
pkg:npm/node-red-dashboard
Range: < 2.26.2
Nodered/Node Red Dashboard
cpe:2.3:a:nodered:node-red-dashboard:*:*:*:*:*:node.js:*:*
Range: <2.26.2

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-2hw7-mxvj-m455ghsaADVISORY
github.com/node-red/node-red-dashboard/issues/669nvdThird Party AdvisoryWEB
github.com/node-red/node-red-dashboard/releases/tag/2.26.2nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-3223ghsaADVISORY
github.com/node-red/node-red-dashboard/commit/f48f356df966f607ba3d09c27396074b81f2ae97ghsaWEB
www.npmjs.com/package/node-red-dashboardghsaWEB

News mentions

0

No linked articles in our index yet.