https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:24:13 +0000 https://db.gcve.eu/vuln/brew-node-red-cve-2019-15607 <p><strong>Affected:</strong> Homebrew: node-red</p> <p>Versions of `node-red` prior to 0.20.8are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize the `name` field in new Flows, allowing attackers to execute arbitrary JavaScript in the victim&#39;s browser.</p> <p>## Recommendation</p> <p>Upgrade to version 0.18.6 or later.</p> <p><strong>Affected:</strong> Homebrew: node-red</p> <p>Versions of `node-red` prior to 0.20.8are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize the `name` field in new Flows, allowing attackers to execute arbitrary JavaScript in the victim&#39;s browser.</p> <p>## Recommendation</p> <p>Upgrade to version 0.18.6 or later.</p> https://db.gcve.eu/vuln/brew-node-red-cve-2019-15607 https://db.gcve.eu/vuln/cve-2019-15607 <p><strong>Affected:</strong> node-red</p> <p>A stored XSS vulnerability is present within node-red (version: &lt;= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.</p> <p><strong>Affected:</strong> node-red</p> <p>A stored XSS vulnerability is present within node-red (version: &lt;= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.</p> https://db.gcve.eu/vuln/cve-2019-15607