node-red-5 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the node-red-5 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Server-Side Request Forgery (SSRF)	<5.0.8-r0
L Arbitrary Code Injection	<5.0.8-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<5.0.8-r0
L CVE-2026-90711	<5.0.8-r0
L Protection Mechanism Failure	<5.0.8-r0
L CVE-2026-88932	<5.0.8-r0
L Resource Exhaustion	<5.0.8-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<5.0.8-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<5.0.8-r0
L CVE-2026-82562	<5.0.8-r0
L CVE-2026-82417	<5.0.8-r0
L Resource Exhaustion	<5.0.8-r0
L CVE-2026-17495	<5.0.8-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<5.0.8-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<5.0.8-r0
L CVE-2026-86472	<5.0.8-r0
L Inefficient Regular Expression Complexity	<5.0.8-r0
L Arbitrary Code Injection	<5.0.8-r0
L CVE-2026-84292	<5.0.7-r0
L CVE-2026-84394	<5.0.7-r0
L CVE-2026-77037	<5.0.5-r0
L Resource Exhaustion	<5.0.5-r0
L CVE-2026-82333	<5.0.5-r0
M Arbitrary Code Injection	<5.0.5-r0
L CVE-2026-77078	<5.0.5-r0
L CVE-2026-77063	<5.0.5-r0
L CVE-2026-75899	<5.0.5-r0
L CVE-2026-75975	<5.0.5-r0
L CVE-2026-76172	<5.0.5-r0
L CVE-2026-75931	<5.0.5-r0
L Improper Input Validation	<5.0.5-r0
L Inefficient Regular Expression Complexity	<5.0.5-r0
L Resource Exhaustion	<5.0.5-r0
L Improper Input Validation	<5.0.5-r0
L Arbitrary Code Injection	<5.0.5-r0
L Arbitrary Code Injection	<5.0.5-r0
L GHSA-5p4m-2wfm-xmqj	<5.0.5-r0
M CVE-2026-16729	<5.0.5-r0
M CVE-2026-15157	<5.0.5-r0
L Resource Exhaustion	<5.0.5-r0
L Improper Input Validation	<5.0.5-r0
L Arbitrary Code Injection	<5.0.5-r0
L CVE-2026-14257	<5.0.5-r0
M CVE-2026-16728	<5.0.5-r0

Vulnerability

Vulnerable Version

Server-Side Request Forgery (SSRF)

<5.0.8-r0