https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:24:14.135795+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/brew-node-red-cve-2019-15607 BREW-node-red-CVE-2019-15607 — Cross-Site Scripting in node-red 2026-09-29T22:24:14.137480+00:00

Affected: Homebrew: node-red

Versions of `node-red` prior to 0.20.8are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize the `name` field in new Flows, allowing attackers to execute arbitrary JavaScript in the victim's browser.

## Recommendation

Upgrade to version 0.18.6 or later.

 https://db.gcve.eu/vuln/cve-2019-15607 CVE-2019-15607 2026-09-29T22:24:14.137541+00:00

Affected: node-red

A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.