https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:33:16.656622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-53943 EUVD-2026-53943 2026-10-06T20:33:16.659367+00:00 EUVD-2026-53943 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10756 fkie_cve-2019-10756 2026-10-06T20:33:16.659400+00:00

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

 https://cve.radiocsirt.org/vuln/ghsa-xg59-m7wx-853q GHSA-xg59-m7wx-853q — Cross-site Scripting in node-red-dashboard 2026-10-06T20:33:16.659430+00:00

Affected: npm: node-red-dashboard

It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.

 https://cve.radiocsirt.org/vuln/gsd-2019-10756 gsd-2019-10756 2026-10-06T20:33:16.659453+00:00 gsd-2019-10756