node-red

v4.1.11 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 1mo Automation & Workflows

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

flow-based-programming javascript low-code node-red openjs-foundation visual-programming

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 1mo

This release removes stray debug logs from externalModules and fixes UI reliability in the node editor.

Why it matters: Removes noisy console output; ensures node editor consistently opens subsequent calls after upgrade to 4.1.11.

AI summary

Minor fixes and improvements.

Type	Severity	Summary	CVE
Security	Critical	Sanitize all args passed to projects/git API Sanitize all args passed to projects/git API Source: llm_adapter@2026-06-04 Confidence: high	—
Feature
Feature	Medium	Add description tooltips to palette categories Add description tooltips to palette categories Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Medium	Allow theme plugin to override node categories Allow theme plugin to override node categories Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Add styles to prevent controls wrapping in find bar Add styles to prevent controls wrapping in find bar Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Medium	Update dependencies Update dependencies Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Update mermaid in dev dependencies Update mermaid in dev dependencies Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix
Bugfix	Medium	Ensure subsequent calls to the node editor can open Ensure subsequent calls to the node editor can open Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix	Low	Remove debug console.log from externalModules Remove debug console.log from externalModules Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix	Low	Fix box-shadow property value Fix box-shadow property value Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

Remove debug console.log from externalModules by @Autre31415 in https://github.com/node-red/node-red/pull/5737
Ensure subsequent calls to the node editor can open by @Steve-Mcl in https://github.com/node-red/node-red/pull/5734
Sanitize all args passed to projects/git api by @knolleary in https://github.com/node-red/node-red/pull/5768
Typo fixes by @bonanitech in https://github.com/node-red/node-red/pull/5767
Fix box-shadow property value by @bonanitech in https://github.com/node-red/node-red/pull/5764
Add description tooltips to palette categories by @knolleary in https://github.com/node-red/node-red/pull/5769
Allow theme plugin to override node categories by @knolleary in https://github.com/node-red/node-red/pull/5770
Update dependencies by @knolleary in https://github.com/node-red/node-red/pull/5772
Update mermaid in dev dependencies by @knolleary in https://github.com/node-red/node-red/pull/5775
Add styles to prevent controls wrapping in find bar by @Steve-Mcl in https://github.com/node-red/node-red/pull/5779
Bump for 4.1.11 release by @knolleary in https://github.com/node-red/node-red/pull/5781

@Autre31415 made their first contribution in https://github.com/node-red/node-red/pull/5737

Full Changelog: https://github.com/node-red/node-red/compare/4.1.10...4.1.11

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track node-red

Get notified when new releases ship.

About node-red

Low-code programming for event-driven applications