@node-red/runtime ====================
90%
Total Score
100
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10049 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @node-red/runtime is vulnerable to Use of Weak Hash in versions 0.2.0 - 3.1.5. | 0.2.0 - 3.1.5 | Low |
CVE-2021-21298 @node-red/runtime is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.2.8. | 0.0.0 - 1.2.8 | Low |
CVE-2021-21297 @node-red/runtime is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes in versions 0.0.0 - 1.2.8. | 0.0.0 - 1.2.8 | High |
| Dependency | Last Release | Score |
|---|---|---|
got Version 12.6.1 | — | — |
rfdc Version 1.4.1 | — | — |
clone Version 2.1.2 | — | — |
semver Version 7.7.4 | — | — |
express Version 4.22.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant