CVE-2021-3223: Nodered Node-Red-Dashboard

High severity, CVSS 7.5. EPSS: 18.5% chance of exploitation in the next 30 days.

Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.

Affected products

• Nodered Node-Red-Dashboard: before 2.26.2 (fixed in 2.26.2)

Published 2021-01-26. Last modified 2026-06-17.