Cve-2026-111497

General
1

Hey there,

I utilize node red as printing function for various applications within the business.

There has been a concern brought forth by the internal security team of a potential security encroachment. The version of node red I have installed is 24.18.0. They are recommending version 24.22.1 as a remediation for the breach noted in the subject line.

Node Red Version 5.0.1

My concern is that the version listed may break node red flows currently developed.

Any suggestions?

2

Hi @kieran.harriman

That CVE is related to the underlying Node.js runtime - not Node-RED itself.

Upgrading your Node.js version from 24.18.0 to 24.22.1 should have no impact on your flows at all.

The latest Node-RED 5 Docker images already ship with Node.js 24.22.1.

Regards,
Nick

3

Awesome. I just updated to the latest version.

Thank you!