CVE-2021-43788: Nodebb

Medium severity, CVSS 5.0. EPSS: 25.8% chance of exploitation in the next 30 days.

Nodebb is an open source Node.js based forum software. Prior to v1.18.5, a path traversal vulnerability was present that allowed users to access JSON files outside of the expected `languages/` directory. The vulnerability has been patched as of v1.18.5. Users are advised to upgrade as soon as possible.

Affected products

• Nodebb Nodebb: from 1.0.4, up to and including 1.18.4

Published 2021-11-29. Last modified 2026-06-17.