# Cve-2026-111497

**URL:** <https://discourse.nodered.org/t/cve-2026-111497/102053>\
**Category:** General\
**Tags:** security\
**Created:** [4 November 2026 12:46 UTC](https://discourse.nodered.org/t/cve-2026-111497/102053 "2026-11-04T12:46:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kieran.harriman](https://avatars.discourse-cdn.com/v4/letter/k/57b2e6/32.png) [@kieran.harriman](https://discourse.nodered.org/u/kieran.harriman)\
**Post date:** [4 November 2026 12:46 UTC](https://discourse.nodered.org/t/cve-2026-111497/102053/1 "2026-11-04T12:46:32Z")

</div>

Hey there,

I utilize node red as printing function for various applications within the business.

There has been a concern brought forth by the internal security team of a potential security encroachment. The version of node red I have installed is 24.18.0. They are recommending version 24.22.1 as a remediation for the breach noted in the subject line.

Node Red Version 5.0.1

My concern is that the version listed may break node red flows currently developed.

Any suggestions?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [4 November 2026 13:01 UTC](https://discourse.nodered.org/t/cve-2026-111497/102053/2 "2026-11-04T13:01:14Z")

</div>

Hi @kieran.harriman

That CVE is related to the underlying Node.js runtime - not Node-RED itself.

Upgrading your Node.js version from 24.18.0 to 24.22.1 should have no impact on your flows at all.

The latest Node-RED 5 Docker images already ship with Node.js 24.22.1.

Regards,  
Nick

---

<div class="post-metadata">

**Author:** ![kieran.harriman](https://avatars.discourse-cdn.com/v4/letter/k/57b2e6/32.png) [@kieran.harriman](https://discourse.nodered.org/u/kieran.harriman)\
**Post date:** [4 November 2026 13:35 UTC](https://discourse.nodered.org/t/cve-2026-111497/102053/3 "2026-11-04T13:35:15Z")

</div>

Awesome. I just updated to the latest version.

Thank you!