Node-RED 4.1.4 is now available.
This includes a dependency update for a security issue related to the tar module, as well as some other fixes. Again, lots of community contributions that we're very thankful for.
Full changelog (including a typo I just spotted...) here: node-red/CHANGELOG.md at 56c641f545da2e65626b427361761985b2c2ca31 · node-red/node-red · GitHub