← Back

Dgtl

dgtl

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Huemagic
huemagic
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-26504
1Dgtl
1Huemagic
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.
CVE-2021-25864
1Dgtl
1Huemagic
Jun 17, 2026
Jan 26, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.