Vulnerabilidades do Jpettitt Meshcore Card

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Jpettitt Meshcore Card: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:jpettitt:meshcore_card

CVE-2026-45323 Crítica · 9.6 CWE-79 28/05/2026

MeshCore Card: XSS vulnerability through meshcore node name

MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore node names are rendered without HTML escaping in meshcore-card, allowing any node within direct or indirect (repeated) radio range to execute arbitrary javascript in the Home Assistant frontend of anyone viewing the card. This vulnerability is fixed in 0.3.3.